@olamundo @freemo

There is a lot of back history involved. Some admins don't like the terms of service used at Qoto -- **specifically some quite Libertarian statements** on it which I personally have made motions to change.

In some other cases it's because this instance did not block some other instance which they found deplorable and a nest of iniquity, etc.

I have been out in Diplomatic missions in the past, but not much resulted -- other than me sending detailed correspondence and sometimes being :

* told to not contact them again.
* or losing my local account at that instance for the attempt.
* or simply getting a polite rebuff on the attempt, which appears the most positive result.

#QOTO is **perceived negatively in some quarters** - and that has implications on **who sees your posts here as well**.

See these two blog posts for detailed info on some of my past attempts :

https://write.tedomum.net/rgx/when-you-discover-your-instance-is-blocked

https://write.tedomum.net/rgx/todon-nl-admin-reacts-to-polite-inquiries

@design_RG @olamundo @freemo

>todon dot nl

Wait a minute! Why are you communicating with that user on gameliberty? It’s clearly a rightwinger or even alt-right.

>2 days later

Your account has been suspended and all of your toots and your uploaded media files have been irreversibly removed from this server and servers where you had followers.

They… that… they didn’t just delete his account. They impersonated him, spamming other instances with fake Delete messages, to trick them into helping retroactively censor him, regardless of their ToSes. Because he may have spoken with someone who was likely to be a wingnut.

…

THIS IS WHY WE SHOULD BE USING PUBLIC KEYS JESUS CHRIST

@cy @design_RG @freemo @olamundo
> we should be using public keys

Already the case, but stored and controlled by the server of course :P

Interesting vector. Who wants to client sign every post⸮
@lanodan @cy @freemo @thatbrickster

@461

That question sounds like it implies it would take effort. Presumably if the client were written correctly it would just need to be be configured once and then every post would get signed automatically.

@lanodan @thatbrickster @cy

@freemo it implies something more fundamental:
ActivityPub would need to be reworked as a client-server model allowing self signed keys at registration and not whatever encryption the server & protocol decides.
@lanodan @thatbrickster @cy

@461 Using OpenKeyChain as the key provider, clients would have it easy in comparison.

@freemo @cy @lanodan