Follow

@freemo How are AcitivityPub messages authenticated? What prevents me for forging messages allegedly from @freemo? I understand that privacy is not an intended feature of the fediverse. But lack of authentication was a drawback of the fully decentralized Usenet protocol. Messages were constantly being forged as a joke. Eventually, gpg signing was added as an afterthought.

I don't see any provision for signing messages on qoto.org or other ActivityPub sites.

@customdesigned As I recall the server has encryption keys to ensure a server caned be mocked.

Sign in to participate in the conversation
Qoto Mastodon

QOTO: Question Others to Teach Ourselves
An inclusive, Academic Freedom, instance
All cultures welcome.
Hate speech and harassment strictly forbidden.