{"generator":"GNU social 2.0.2-dev","title":"Conversation","totalItems":20,"items":[{"actor":{"id":"https:\/\/goatdaddy.net\/profile\/vvelox","displayName":"vvelox","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/theme\/gnusocialjp\/default-avatar-profile.png","rel":"avatar","type":"image\/png","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/theme\/gnusocialjp\/default-avatar-stream.png","rel":"avatar","type":"image\/png","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/theme\/gnusocialjp\/default-avatar-mini.png","rel":"avatar","type":"image\/png","width":24,"height":24}],"profile_info":{"local_id":"376162"}},"image":{"url":"https:\/\/gnusocial.jp\/theme\/gnusocialjp\/default-avatar-profile.png","rel":"avatar","type":"image\/png","width":96,"height":96},"objectType":"person","url":"https:\/\/goatdaddy.net\/profile\/vvelox","portablecontacts_net":{"preferredUsername":"vvelox","displayName":"vvelox"}},"content":"<p><a href=\"https:\/\/furry.engineer\/users\/orman\" class=\"u-url mention\">@orman<\/a> <a href=\"https:\/\/furry.engineer\/users\/soatok\" class=\"u-url mention\">@soatok<\/a> You realize you are having a completely different coversation with <a href=\"https:\/\/fosstodon.org\/users\/pemensik\" class=\"u-url mention\">@pemensik<\/a> than me?<\/p><p>I'm the one that originally said fuck the IETF in this part and said the important part was the RFC. I agreed with you.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-06-14:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/goatdaddy.net\/objects\/c1c30b3a-7269-56fc-b1e3-786712452574","object":{"id":"https:\/\/goatdaddy.net\/objects\/c1c30b3a-7269-56fc-b1e3-786712452574","objectType":"note","content":"<p><a href=\"https:\/\/furry.engineer\/users\/orman\" class=\"u-url mention\">@orman<\/a> <a href=\"https:\/\/furry.engineer\/users\/soatok\" class=\"u-url mention\">@soatok<\/a> You realize you are having a completely different coversation with <a href=\"https:\/\/fosstodon.org\/users\/pemensik\" class=\"u-url mention\">@pemensik<\/a> than me?<\/p><p>I'm the one that originally said fuck the IETF in this part and said the important part was the RFC. I agreed with you.<\/p>","url":"https:\/\/gnusocial.jp\/notice\/11834642","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/furry.engineer\/users\/soatok\/statuses\/115822314950371665","url":"https:\/\/furry.engineer\/@soatok\/115822314950371665"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/furry.engineer\/users\/soatok"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/fosstodon.org\/users\/pemensik"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/furry.engineer\/users\/orman"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/goatdaddy.net\/profile\/vvelox"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2025-12-30:objectType=thread:nonce=1fe3b2483db9ca61","notice_info":{"local_id":"11834642","source":"ActivityPub"}},"published":"2026-01-01T23:19:58+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/gnusocial.jp\/notice\/11834642"},{"actor":{"id":"https:\/\/furry.engineer\/users\/soatok","displayName":"Soatok Dreamseeker","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/34725-original-tmp20230809073048.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/34725-96-20230823231405.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/34725-48-20230823231406.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/34725-24-20230823231406.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"34725"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/34725-96-20230823231405.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"He\/him. Gay\/demi dhole (Cuon Alpinus) furry.Blogger, programmer, security engineer, cryptography nerd. 30+Too spicy for Twitter (banned with all the prominent journalists on 2022-12-16)I don&#39;t represent any company, individual, or community.","url":"https:\/\/furry.engineer\/@soatok","portablecontacts_net":{"preferredUsername":"soatok","displayName":"Soatok Dreamseeker","note":"He\/him. Gay\/demi dhole (Cuon Alpinus) furry.Blogger, programmer, security engineer, cryptography nerd. 30+Too spicy for Twitter (banned with all the prominent journalists on 2022-12-16)I don&#39;t represent any company, individual, or community."}},"content":"<p><a href=\"https:\/\/goatdaddy.net\/profile\/vvelox\" class=\"u-url mention\" rel=\"nofollow\">@vvelox<\/a> Yeah, I realize<\/p>","generator":{"id":"tag:gnusocial.jp,2026-06-14:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/furry.engineer\/users\/soatok\/statuses\/115822383802587902","object":{"id":"https:\/\/furry.engineer\/users\/soatok\/statuses\/115822383802587902","objectType":"note","content":"<p><a href=\"https:\/\/goatdaddy.net\/profile\/vvelox\" class=\"u-url mention\" rel=\"nofollow\">@vvelox<\/a> Yeah, I realize<\/p>","url":"https:\/\/furry.engineer\/@soatok\/115822383802587902","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/goatdaddy.net\/objects\/c1c30b3a-7269-56fc-b1e3-786712452574","url":"https:\/\/gnusocial.jp\/notice\/11834642"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/goatdaddy.net\/profile\/vvelox"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2025-12-30:objectType=thread:nonce=1fe3b2483db9ca61","notice_info":{"local_id":"11834643","source":"ActivityPub"}},"published":"2026-01-01T23:19:57+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/furry.engineer\/@soatok\/115822383802587902"},{"actor":{"id":"https:\/\/furry.engineer\/users\/soatok","displayName":"Soatok Dreamseeker","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/34725-original-tmp20230809073048.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/34725-96-20230823231405.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/34725-48-20230823231406.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/34725-24-20230823231406.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"34725"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/34725-96-20230823231405.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"He\/him. Gay\/demi dhole (Cuon Alpinus) furry.Blogger, programmer, security engineer, cryptography nerd. 30+Too spicy for Twitter (banned with all the prominent journalists on 2022-12-16)I don&#39;t represent any company, individual, or community.","url":"https:\/\/furry.engineer\/@soatok","portablecontacts_net":{"preferredUsername":"soatok","displayName":"Soatok Dreamseeker","note":"He\/him. Gay\/demi dhole (Cuon Alpinus) furry.Blogger, programmer, security engineer, cryptography nerd. 30+Too spicy for Twitter (banned with all the prominent journalists on 2022-12-16)I don&#39;t represent any company, individual, or community."}},"content":"<p><a href=\"https:\/\/goatdaddy.net\/profile\/vvelox\" class=\"u-url mention\" rel=\"nofollow\">@vvelox<\/a> <a href=\"https:\/\/fosstodon.org\/@pemensik\" class=\"u-url mention\" rel=\"nofollow\">@pemensik<\/a> <a href=\"https:\/\/furry.engineer\/@orman\" class=\"u-url mention\">@orman<\/a> Anyway, no sense talking about this until I find time to write my proposal<\/p>","generator":{"id":"tag:gnusocial.jp,2026-06-14:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/furry.engineer\/users\/soatok\/statuses\/115822328099843921","object":{"id":"https:\/\/furry.engineer\/users\/soatok\/statuses\/115822328099843921","objectType":"note","content":"<p><a href=\"https:\/\/goatdaddy.net\/profile\/vvelox\" class=\"u-url mention\" rel=\"nofollow\">@vvelox<\/a> <a href=\"https:\/\/fosstodon.org\/@pemensik\" class=\"u-url mention\" rel=\"nofollow\">@pemensik<\/a> <a href=\"https:\/\/furry.engineer\/@orman\" class=\"u-url mention\">@orman<\/a> Anyway, no sense talking about this until I find time to write my proposal<\/p>","url":"https:\/\/gnusocial.jp\/notice\/11834545","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/furry.engineer\/users\/soatok\/statuses\/115822314950371665","url":"https:\/\/furry.engineer\/@soatok\/115822314950371665"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/fosstodon.org\/users\/pemensik"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/furry.engineer\/users\/orman"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/goatdaddy.net\/profile\/vvelox"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2025-12-30:objectType=thread:nonce=1fe3b2483db9ca61","notice_info":{"local_id":"11834545","source":"ActivityPub"}},"published":"2026-01-01T23:02:20+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/gnusocial.jp\/notice\/11834545"},{"actor":{"id":"https:\/\/goatdaddy.net\/profile\/vvelox","displayName":"vvelox","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/theme\/gnusocialjp\/default-avatar-profile.png","rel":"avatar","type":"image\/png","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/theme\/gnusocialjp\/default-avatar-stream.png","rel":"avatar","type":"image\/png","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/theme\/gnusocialjp\/default-avatar-mini.png","rel":"avatar","type":"image\/png","width":24,"height":24}],"profile_info":{"local_id":"376162"}},"image":{"url":"https:\/\/gnusocial.jp\/theme\/gnusocialjp\/default-avatar-profile.png","rel":"avatar","type":"image\/png","width":96,"height":96},"objectType":"person","url":"https:\/\/goatdaddy.net\/profile\/vvelox","portablecontacts_net":{"preferredUsername":"vvelox","displayName":"vvelox"}},"content":"<a href=\"https:\/\/furry.engineer\/users\/orman\" class=\"u-url mention\">@orman<\/a> <a href=\"https:\/\/fosstodon.org\/users\/pemensik\" class=\"u-url mention\">@pemensik<\/a> <a href=\"https:\/\/furry.engineer\/users\/soatok\" class=\"u-url mention\">@soatok<\/a> That is what publishing a RFC is for.","generator":{"id":"tag:gnusocial.jp,2026-06-14:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/goatdaddy.net\/objects\/c1c30b3a-1269-56fb-c4a7-c02552501467","object":{"id":"https:\/\/goatdaddy.net\/objects\/c1c30b3a-1269-56fb-c4a7-c02552501467","objectType":"note","content":"<a href=\"https:\/\/furry.engineer\/users\/orman\" class=\"u-url mention\">@orman<\/a> <a href=\"https:\/\/fosstodon.org\/users\/pemensik\" class=\"u-url mention\">@pemensik<\/a> <a href=\"https:\/\/furry.engineer\/users\/soatok\" class=\"u-url mention\">@soatok<\/a> That is what publishing a RFC is for.","url":"https:\/\/gnusocial.jp\/notice\/11834534","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/fosstodon.org\/users\/pemensik\/statuses\/115822304965170160","url":"https:\/\/fosstodon.org\/@pemensik\/115822304965170160"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/furry.engineer\/users\/soatok"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/fosstodon.org\/users\/pemensik"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/furry.engineer\/users\/orman"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/goatdaddy.net\/profile\/vvelox"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2025-12-30:objectType=thread:nonce=1fe3b2483db9ca61","notice_info":{"local_id":"11834534","source":"ActivityPub"}},"published":"2026-01-01T22:58:11+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/gnusocial.jp\/notice\/11834534"},{"actor":{"id":"https:\/\/furry.engineer\/users\/soatok","displayName":"Soatok Dreamseeker","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/34725-original-tmp20230809073048.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/34725-96-20230823231405.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/34725-48-20230823231406.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/34725-24-20230823231406.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"34725"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/34725-96-20230823231405.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"He\/him. Gay\/demi dhole (Cuon Alpinus) furry.Blogger, programmer, security engineer, cryptography nerd. 30+Too spicy for Twitter (banned with all the prominent journalists on 2022-12-16)I don&#39;t represent any company, individual, or community.","url":"https:\/\/furry.engineer\/@soatok","portablecontacts_net":{"preferredUsername":"soatok","displayName":"Soatok Dreamseeker","note":"He\/him. Gay\/demi dhole (Cuon Alpinus) furry.Blogger, programmer, security engineer, cryptography nerd. 30+Too spicy for Twitter (banned with all the prominent journalists on 2022-12-16)I don&#39;t represent any company, individual, or community."}},"content":"<p><a href=\"https:\/\/goatdaddy.net\/profile\/vvelox\" class=\"u-url mention\" rel=\"nofollow\">@vvelox<\/a> <a href=\"https:\/\/fosstodon.org\/@pemensik\" class=\"u-url mention\" rel=\"nofollow\">@pemensik<\/a> <a href=\"https:\/\/furry.engineer\/@orman\" class=\"u-url mention\">@orman<\/a> <a href=\"https:\/\/github.com\/C2SP\/C2SP\" rel=\"nofollow\">https:\/\/github.com\/C2SP\/C2SP<\/a> I will not bother with the IETF<\/p>","generator":{"id":"tag:gnusocial.jp,2026-06-14:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/furry.engineer\/users\/soatok\/statuses\/115822314950371665","object":{"id":"https:\/\/furry.engineer\/users\/soatok\/statuses\/115822314950371665","objectType":"note","content":"<p><a href=\"https:\/\/goatdaddy.net\/profile\/vvelox\" class=\"u-url mention\" rel=\"nofollow\">@vvelox<\/a> <a href=\"https:\/\/fosstodon.org\/@pemensik\" class=\"u-url mention\" rel=\"nofollow\">@pemensik<\/a> <a href=\"https:\/\/furry.engineer\/@orman\" class=\"u-url mention\">@orman<\/a> <a href=\"https:\/\/github.com\/C2SP\/C2SP\" rel=\"nofollow\">https:\/\/github.com\/C2SP\/C2SP<\/a> I will not bother with the IETF<\/p>","url":"https:\/\/furry.engineer\/@soatok\/115822314950371665","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/goatdaddy.net\/objects\/c1c30b3a-1269-56fb-c4a7-c02552501467","url":"https:\/\/gnusocial.jp\/notice\/11834534"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/fosstodon.org\/users\/pemensik"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/furry.engineer\/users\/orman"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/goatdaddy.net\/profile\/vvelox"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2025-12-30:objectType=thread:nonce=1fe3b2483db9ca61","notice_info":{"local_id":"11834535","source":"ActivityPub"}},"published":"2026-01-01T22:58:05+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/furry.engineer\/@soatok\/115822314950371665"},{"actor":{"id":"https:\/\/furry.engineer\/users\/soatok","displayName":"Soatok Dreamseeker","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/34725-original-tmp20230809073048.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/34725-96-20230823231405.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/34725-48-20230823231406.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/34725-24-20230823231406.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"34725"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/34725-96-20230823231405.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"He\/him. Gay\/demi dhole (Cuon Alpinus) furry.Blogger, programmer, security engineer, cryptography nerd. 30+Too spicy for Twitter (banned with all the prominent journalists on 2022-12-16)I don&#39;t represent any company, individual, or community.","url":"https:\/\/furry.engineer\/@soatok","portablecontacts_net":{"preferredUsername":"soatok","displayName":"Soatok Dreamseeker","note":"He\/him. Gay\/demi dhole (Cuon Alpinus) furry.Blogger, programmer, security engineer, cryptography nerd. 30+Too spicy for Twitter (banned with all the prominent journalists on 2022-12-16)I don&#39;t represent any company, individual, or community."}},"content":"<p><a href=\"https:\/\/fosstodon.org\/@pemensik\" class=\"u-url mention\" rel=\"nofollow\">@pemensik<\/a> Didn't ask.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-06-14:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/furry.engineer\/users\/soatok\/statuses\/115822305667984489","object":{"id":"https:\/\/furry.engineer\/users\/soatok\/statuses\/115822305667984489","objectType":"note","content":"<p><a href=\"https:\/\/fosstodon.org\/@pemensik\" class=\"u-url mention\" rel=\"nofollow\">@pemensik<\/a> Didn't ask.<\/p>","url":"https:\/\/gnusocial.jp\/notice\/11834521","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/fosstodon.org\/users\/pemensik\/statuses\/115822304965170160","url":"https:\/\/fosstodon.org\/@pemensik\/115822304965170160"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/fosstodon.org\/users\/pemensik"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2025-12-30:objectType=thread:nonce=1fe3b2483db9ca61","notice_info":{"local_id":"11834521","source":"ActivityPub"}},"published":"2026-01-01T22:56:15+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/gnusocial.jp\/notice\/11834521"},{"actor":{"id":"https:\/\/fosstodon.org\/users\/pemensik","displayName":"Petr Men\u0161\u00edk :fedora:","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/247150-original-tmp20240306071104.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/247150-96-20240306071105.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/247150-48-20240306071105.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/247150-24-20240306071105.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"247150"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/247150-96-20240306071105.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"DNS and Linux specialist, RHEL maintainer, Red Hatter","url":"https:\/\/fosstodon.org\/@pemensik","portablecontacts_net":{"preferredUsername":"pemensik","displayName":"Petr Men\u0161\u00edk :fedora:","note":"DNS and Linux specialist, RHEL maintainer, Red Hatter"}},"content":"<p><a href=\"https:\/\/furry.engineer\/@soatok\" class=\"u-url mention\">@soatok<\/a> <a href=\"https:\/\/goatdaddy.net\/profile\/vvelox\" class=\"u-url mention\">@vvelox<\/a> <a href=\"https:\/\/furry.engineer\/@orman\" class=\"u-url mention\">@orman<\/a> no, you don't. But if your serious work should ever get serious acceptance, I think you should onboard at least some people there<\/p>","generator":{"id":"tag:gnusocial.jp,2026-06-14:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/fosstodon.org\/users\/pemensik\/statuses\/115822304965170160","object":{"id":"https:\/\/fosstodon.org\/users\/pemensik\/statuses\/115822304965170160","objectType":"note","content":"<p><a href=\"https:\/\/furry.engineer\/@soatok\" class=\"u-url mention\">@soatok<\/a> <a href=\"https:\/\/goatdaddy.net\/profile\/vvelox\" class=\"u-url mention\">@vvelox<\/a> <a href=\"https:\/\/furry.engineer\/@orman\" class=\"u-url mention\">@orman<\/a> no, you don't. But if your serious work should ever get serious acceptance, I think you should onboard at least some people there<\/p>","url":"https:\/\/fosstodon.org\/@pemensik\/115822304965170160","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/furry.engineer\/users\/soatok\/statuses\/115822292680904413","url":"https:\/\/gnusocial.jp\/notice\/11834511"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/furry.engineer\/users\/soatok"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/furry.engineer\/users\/orman"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/goatdaddy.net\/profile\/vvelox"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2025-12-30:objectType=thread:nonce=1fe3b2483db9ca61","notice_info":{"local_id":"11834520","source":"ActivityPub"}},"published":"2026-01-01T22:56:15+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/fosstodon.org\/@pemensik\/115822304965170160"},{"actor":{"id":"https:\/\/fosstodon.org\/users\/pemensik","displayName":"Petr Men\u0161\u00edk :fedora:","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/247150-original-tmp20240306071104.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/247150-96-20240306071105.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/247150-48-20240306071105.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/247150-24-20240306071105.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"247150"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/247150-96-20240306071105.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"DNS and Linux specialist, RHEL maintainer, Red Hatter","url":"https:\/\/fosstodon.org\/@pemensik","portablecontacts_net":{"preferredUsername":"pemensik","displayName":"Petr Men\u0161\u00edk :fedora:","note":"DNS and Linux specialist, RHEL maintainer, Red Hatter"}},"content":"<p><a href=\"https:\/\/furry.engineer\/@soatok\" class=\"u-url mention\">@soatok<\/a> <a href=\"https:\/\/goatdaddy.net\/profile\/vvelox\" class=\"u-url mention\">@vvelox<\/a> <a href=\"https:\/\/furry.engineer\/@orman\" class=\"u-url mention\">@orman<\/a> is there any IETF WG formed already to create successor of the email?<\/p>","generator":{"id":"tag:gnusocial.jp,2026-06-14:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/fosstodon.org\/users\/pemensik\/statuses\/115822230902399104","object":{"id":"https:\/\/fosstodon.org\/users\/pemensik\/statuses\/115822230902399104","objectType":"note","content":"<p><a href=\"https:\/\/furry.engineer\/@soatok\" class=\"u-url mention\">@soatok<\/a> <a href=\"https:\/\/goatdaddy.net\/profile\/vvelox\" class=\"u-url mention\">@vvelox<\/a> <a href=\"https:\/\/furry.engineer\/@orman\" class=\"u-url mention\">@orman<\/a> is there any IETF WG formed already to create successor of the email?<\/p>","url":"https:\/\/fosstodon.org\/@pemensik\/115822230902399104","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/furry.engineer\/users\/soatok\/statuses\/115822169695011529","url":"https:\/\/gnusocial.jp\/notice\/11834373"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/furry.engineer\/users\/soatok"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/furry.engineer\/users\/orman"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/goatdaddy.net\/profile\/vvelox"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2025-12-30:objectType=thread:nonce=1fe3b2483db9ca61","notice_info":{"local_id":"11834510","source":"ActivityPub"}},"published":"2026-01-01T22:52:26+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/fosstodon.org\/@pemensik\/115822230902399104"},{"actor":{"id":"https:\/\/furry.engineer\/users\/soatok","displayName":"Soatok Dreamseeker","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/34725-original-tmp20230809073048.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/34725-96-20230823231405.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/34725-48-20230823231406.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/34725-24-20230823231406.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"34725"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/34725-96-20230823231405.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"He\/him. Gay\/demi dhole (Cuon Alpinus) furry.Blogger, programmer, security engineer, cryptography nerd. 30+Too spicy for Twitter (banned with all the prominent journalists on 2022-12-16)I don&#39;t represent any company, individual, or community.","url":"https:\/\/furry.engineer\/@soatok","portablecontacts_net":{"preferredUsername":"soatok","displayName":"Soatok Dreamseeker","note":"He\/him. Gay\/demi dhole (Cuon Alpinus) furry.Blogger, programmer, security engineer, cryptography nerd. 30+Too spicy for Twitter (banned with all the prominent journalists on 2022-12-16)I don&#39;t represent any company, individual, or community."}},"content":"<p><a href=\"https:\/\/fosstodon.org\/@pemensik\" class=\"u-url mention\" rel=\"nofollow\">@pemensik<\/a> <a href=\"https:\/\/goatdaddy.net\/profile\/vvelox\" class=\"u-url mention\" rel=\"nofollow\">@vvelox<\/a> <a href=\"https:\/\/furry.engineer\/@orman\" class=\"u-url mention\">@orman<\/a> I don't need the IETF's permission to do anything<\/p>","generator":{"id":"tag:gnusocial.jp,2026-06-14:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/furry.engineer\/users\/soatok\/statuses\/115822292680904413","object":{"id":"https:\/\/furry.engineer\/users\/soatok\/statuses\/115822292680904413","objectType":"note","content":"<p><a href=\"https:\/\/fosstodon.org\/@pemensik\" class=\"u-url mention\" rel=\"nofollow\">@pemensik<\/a> <a href=\"https:\/\/goatdaddy.net\/profile\/vvelox\" class=\"u-url mention\" rel=\"nofollow\">@vvelox<\/a> <a href=\"https:\/\/furry.engineer\/@orman\" class=\"u-url mention\">@orman<\/a> I don't need the IETF's permission to do anything<\/p>","url":"https:\/\/gnusocial.jp\/notice\/11834511","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/fosstodon.org\/users\/pemensik\/statuses\/115822230902399104","url":"https:\/\/fosstodon.org\/@pemensik\/115822230902399104"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/fosstodon.org\/users\/pemensik"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/furry.engineer\/users\/orman"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/goatdaddy.net\/profile\/vvelox"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2025-12-30:objectType=thread:nonce=1fe3b2483db9ca61","notice_info":{"local_id":"11834511","source":"ActivityPub"}},"published":"2026-01-01T22:52:24+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/gnusocial.jp\/notice\/11834511"},{"actor":{"id":"https:\/\/goatdaddy.net\/profile\/vvelox","displayName":"vvelox","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/theme\/gnusocialjp\/default-avatar-profile.png","rel":"avatar","type":"image\/png","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/theme\/gnusocialjp\/default-avatar-stream.png","rel":"avatar","type":"image\/png","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/theme\/gnusocialjp\/default-avatar-mini.png","rel":"avatar","type":"image\/png","width":24,"height":24}],"profile_info":{"local_id":"376162"}},"image":{"url":"https:\/\/gnusocial.jp\/theme\/gnusocialjp\/default-avatar-profile.png","rel":"avatar","type":"image\/png","width":96,"height":96},"objectType":"person","url":"https:\/\/goatdaddy.net\/profile\/vvelox","portablecontacts_net":{"preferredUsername":"vvelox","displayName":"vvelox"}},"content":"<p><a href=\"https:\/\/furry.engineer\/users\/orman\" class=\"u-url mention\">@orman<\/a> <a href=\"https:\/\/fosstodon.org\/users\/pemensik\" class=\"u-url mention\">@pemensik<\/a> <a href=\"https:\/\/furry.engineer\/users\/soatok\" class=\"u-url mention\">@soatok<\/a> If you don't mind me saying, you are looking are likely looking at creating a encrypted messaging system than a actual alternative to email.<\/p><p>Saying you are creating a alternative to email means tackling a whole hell of a lot of infrastructure that needs replacing.<\/p><p>I'm not saying you should not start work on something like that, I just think you massively underestimate how much is involved or some of the unique issues bodies the server can't parse as they are encrypted bring(such as it makes adversarial handling much harder as writing a replacement for Spamassassin needs to use headers only then, meaning you now need to split it in two as you need part to run on the server and part to run on the viewing client). Writing a replacement for Sieve means similar issues as well.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-06-14:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/goatdaddy.net\/objects\/c1c30b3a-1369-56f1-de4e-a45554350833","object":{"id":"https:\/\/goatdaddy.net\/objects\/c1c30b3a-1369-56f1-de4e-a45554350833","objectType":"note","content":"<p><a href=\"https:\/\/furry.engineer\/users\/orman\" class=\"u-url mention\">@orman<\/a> <a href=\"https:\/\/fosstodon.org\/users\/pemensik\" class=\"u-url mention\">@pemensik<\/a> <a href=\"https:\/\/furry.engineer\/users\/soatok\" class=\"u-url mention\">@soatok<\/a> If you don't mind me saying, you are looking are likely looking at creating a encrypted messaging system than a actual alternative to email.<\/p><p>Saying you are creating a alternative to email means tackling a whole hell of a lot of infrastructure that needs replacing.<\/p><p>I'm not saying you should not start work on something like that, I just think you massively underestimate how much is involved or some of the unique issues bodies the server can't parse as they are encrypted bring(such as it makes adversarial handling much harder as writing a replacement for Spamassassin needs to use headers only then, meaning you now need to split it in two as you need part to run on the server and part to run on the viewing client). Writing a replacement for Sieve means similar issues as well.<\/p>","url":"https:\/\/goatdaddy.net\/display\/c1c30b3a-1369-56f1-de4e-a45554350833","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/furry.engineer\/users\/soatok\/statuses\/115821912943946934","url":"https:\/\/gnusocial.jp\/notice\/11834038"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/furry.engineer\/users\/soatok"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/fosstodon.org\/users\/pemensik"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/furry.engineer\/users\/orman"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2025-12-30:objectType=thread:nonce=1fe3b2483db9ca61","notice_info":{"local_id":"11834371","source":"ActivityPub"}},"published":"2026-01-01T22:21:53+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/goatdaddy.net\/display\/c1c30b3a-1369-56f1-de4e-a45554350833"},{"actor":{"id":"https:\/\/furry.engineer\/users\/soatok","displayName":"Soatok Dreamseeker","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/34725-original-tmp20230809073048.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/34725-96-20230823231405.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/34725-48-20230823231406.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/34725-24-20230823231406.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"34725"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/34725-96-20230823231405.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"He\/him. Gay\/demi dhole (Cuon Alpinus) furry.Blogger, programmer, security engineer, cryptography nerd. 30+Too spicy for Twitter (banned with all the prominent journalists on 2022-12-16)I don&#39;t represent any company, individual, or community.","url":"https:\/\/furry.engineer\/@soatok","portablecontacts_net":{"preferredUsername":"soatok","displayName":"Soatok Dreamseeker","note":"He\/him. Gay\/demi dhole (Cuon Alpinus) furry.Blogger, programmer, security engineer, cryptography nerd. 30+Too spicy for Twitter (banned with all the prominent journalists on 2022-12-16)I don&#39;t represent any company, individual, or community."}},"content":"<p><a href=\"https:\/\/goatdaddy.net\/profile\/vvelox\" class=\"u-url mention\" rel=\"nofollow\">@vvelox<\/a> <a href=\"https:\/\/furry.engineer\/@orman\" class=\"u-url mention\">@orman<\/a> <a href=\"https:\/\/fosstodon.org\/@pemensik\" class=\"u-url mention\" rel=\"nofollow\">@pemensik<\/a> No. This is separate than the encrypted messaging projects I'm involved in, and I am not underestimating it. Why do you said I'm starting this this year, not finishing it with any deadline?<\/p>","generator":{"id":"tag:gnusocial.jp,2026-06-14:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/furry.engineer\/users\/soatok\/statuses\/115822169695011529","object":{"id":"https:\/\/furry.engineer\/users\/soatok\/statuses\/115822169695011529","objectType":"note","content":"<p><a href=\"https:\/\/goatdaddy.net\/profile\/vvelox\" class=\"u-url mention\" rel=\"nofollow\">@vvelox<\/a> <a href=\"https:\/\/furry.engineer\/@orman\" class=\"u-url mention\">@orman<\/a> <a href=\"https:\/\/fosstodon.org\/@pemensik\" class=\"u-url mention\" rel=\"nofollow\">@pemensik<\/a> No. This is separate than the encrypted messaging projects I'm involved in, and I am not underestimating it. Why do you said I'm starting this this year, not finishing it with any deadline?<\/p>","url":"https:\/\/gnusocial.jp\/notice\/11834373","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/goatdaddy.net\/objects\/c1c30b3a-1369-56f1-de4e-a45554350833","url":"https:\/\/goatdaddy.net\/display\/c1c30b3a-1369-56f1-de4e-a45554350833"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/fosstodon.org\/users\/pemensik"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/furry.engineer\/users\/orman"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/goatdaddy.net\/profile\/vvelox"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2025-12-30:objectType=thread:nonce=1fe3b2483db9ca61","notice_info":{"local_id":"11834373","source":"ActivityPub"}},"published":"2026-01-01T22:21:52+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/gnusocial.jp\/notice\/11834373"},{"actor":{"id":"https:\/\/furry.engineer\/users\/soatok","displayName":"Soatok Dreamseeker","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/34725-original-tmp20230809073048.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/34725-96-20230823231405.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/34725-48-20230823231406.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/34725-24-20230823231406.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"34725"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/34725-96-20230823231405.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"He\/him. Gay\/demi dhole (Cuon Alpinus) furry.Blogger, programmer, security engineer, cryptography nerd. 30+Too spicy for Twitter (banned with all the prominent journalists on 2022-12-16)I don&#39;t represent any company, individual, or community.","url":"https:\/\/furry.engineer\/@soatok","portablecontacts_net":{"preferredUsername":"soatok","displayName":"Soatok Dreamseeker","note":"He\/him. Gay\/demi dhole (Cuon Alpinus) furry.Blogger, programmer, security engineer, cryptography nerd. 30+Too spicy for Twitter (banned with all the prominent journalists on 2022-12-16)I don&#39;t represent any company, individual, or community."}},"content":"<p><a href=\"https:\/\/furry.engineer\/@orman\" class=\"u-url mention\">@orman<\/a> <a href=\"https:\/\/fosstodon.org\/@pemensik\" class=\"u-url mention\" rel=\"nofollow\">@pemensik<\/a> And there's half a century of legacy baked into the email RFC and software that implements it.<\/p><p>Most end users don't care about RFCs or protocols. They care about their user experience.<\/p><p>Thus, I'm going to write an encrypted alternative to email, rather than try to fix email itself.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-06-14:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/furry.engineer\/users\/soatok\/statuses\/115821912943946934","object":{"id":"https:\/\/furry.engineer\/users\/soatok\/statuses\/115821912943946934","objectType":"note","content":"<p><a href=\"https:\/\/furry.engineer\/@orman\" class=\"u-url mention\">@orman<\/a> <a href=\"https:\/\/fosstodon.org\/@pemensik\" class=\"u-url mention\" rel=\"nofollow\">@pemensik<\/a> And there's half a century of legacy baked into the email RFC and software that implements it.<\/p><p>Most end users don't care about RFCs or protocols. They care about their user experience.<\/p><p>Thus, I'm going to write an encrypted alternative to email, rather than try to fix email itself.<\/p>","url":"https:\/\/gnusocial.jp\/notice\/11834038","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/furry.engineer\/users\/orman\/statuses\/115821873421065432","url":"https:\/\/furry.engineer\/@orman\/115821873421065432"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/fosstodon.org\/users\/pemensik"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/furry.engineer\/users\/orman"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2025-12-30:objectType=thread:nonce=1fe3b2483db9ca61","notice_info":{"local_id":"11834038","source":"ActivityPub"}},"published":"2026-01-01T21:16:17+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/gnusocial.jp\/notice\/11834038"},{"actor":{"id":"https:\/\/furry.engineer\/users\/soatok","displayName":"Soatok Dreamseeker","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/34725-original-tmp20230809073048.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/34725-96-20230823231405.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/34725-48-20230823231406.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/34725-24-20230823231406.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"34725"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/34725-96-20230823231405.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"He\/him. Gay\/demi dhole (Cuon Alpinus) furry.Blogger, programmer, security engineer, cryptography nerd. 30+Too spicy for Twitter (banned with all the prominent journalists on 2022-12-16)I don&#39;t represent any company, individual, or community.","url":"https:\/\/furry.engineer\/@soatok","portablecontacts_net":{"preferredUsername":"soatok","displayName":"Soatok Dreamseeker","note":"He\/him. Gay\/demi dhole (Cuon Alpinus) furry.Blogger, programmer, security engineer, cryptography nerd. 30+Too spicy for Twitter (banned with all the prominent journalists on 2022-12-16)I don&#39;t represent any company, individual, or community."}},"content":"RT @soatok @simo5 @neverpanic @soatok this is one of my pet peeve rants: we have signature formats. (Several of them, even). Cryptographic standards define functions that map a collection of byte strings to some other byte strings. Files can store byte strings. What we are somewhat lacking is fully specified public key formats, but even that we have some (Tink defines it's own and can read\/write many of the existing formats). The signature should just be the byte string given as the output of the signing algorithm. It's the public key that needs the information for verifying the signature. So if I give you a public key (including a definition of the full algorithm used, all the hash functions and security parameters etc), then you can verify a signature. If you want crypto agility, then the thing you need is support for key sets, i.e. multiple, equally trusted keys. That allows you to add, promote, and delete keys in a distributed environment. You have two options for the signature format in this case (and Tink supports both): either you keep the unmodified signature, try all public keys and call the signature verified if it verified under one of the public keys (great for comparability), or you put a short and meaningless identifier in front of the signature, which allows you to directly jump to the right public key. Better performance, but not compatible with libraries that don't support key sets in the same way. In both cases, this composite algorithm retains EUF-CMA\/SUF-CMA as long as all keys in the key set are trusted and have EUF-CMA\/SUF-CMA.Interestingly, pretty much all other types of signature formats, such as JWT (and as far as I know PGP) violate EUF-CMA and definitely violate SUF-CMA, so I argue (fairly strongly, given all the attacks due to these violations), that the Tink way of supporting key sets and signatures is the correct approach.","generator":{"id":"tag:gnusocial.jp,2026-06-14:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/furry.engineer\/users\/soatok\/statuses\/115821908658807390\/activity","object":{"id":"https:\/\/fosstodon.org\/users\/simo5\/statuses\/115819975805743988","objectType":"note","content":"<p><a href=\"https:\/\/chaos.social\/@neverpanic\" class=\"u-url mention\">@neverpanic<\/a> <a href=\"https:\/\/infosec.exchange\/@sophieschmieg\" class=\"u-url mention\">@sophieschmieg<\/a> <a href=\"https:\/\/furry.engineer\/@soatok\" class=\"u-url mention\">@soatok<\/a> it is not clear that it defines a signatire standard, seem like it only offers a signature API.<br \/>Have to say the presentation is quite vague.<\/p>","url":"https:\/\/gnusocial.jp\/notice\/11834028","status_net":{"notice_id":null}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2025-12-30:objectType=thread:nonce=1fe3b2483db9ca61","notice_info":{"local_id":"11834030","source":"ActivityPub","repeat_of":"11834028"}},"published":"2026-01-01T21:14:53+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"title":"soatok repeated a notice by simo5","verb":"share","url":"https:\/\/furry.engineer\/users\/soatok\/statuses\/115821908658807390\/activity"},{"actor":{"id":"https:\/\/chaos.social\/users\/neverpanic","displayName":"Clemens","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/251115-original-tmp20240322063122.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/251115-96-20240322063122.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/251115-48-20240322063122.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/251115-24-20240322063122.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"251115"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/251115-96-20240322063122.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"MacPorts Developer, PPL\/A, Works at Red Hat on Cryptographysearchable","url":"https:\/\/chaos.social\/@neverpanic","portablecontacts_net":{"preferredUsername":"neverpanic","displayName":"Clemens","note":"MacPorts Developer, PPL\/A, Works at Red Hat on Cryptographysearchable"}},"content":"<p><a href=\"https:\/\/furry.engineer\/@soatok\" class=\"u-url mention\">@soatok<\/a> Wholeheartedly agree. But: For the distro package signing problem, minisign doesn't support PQC or crypto agility (ed25519 wasn't FIPS until recently, Common Criteria requires curves &gt;= 384), sigstore doesn't have PQC either, only a Go implementation (no FIPS until recently), and it's offline verification is somewhat lacking AIUI.<\/p><p>That's the reason we're still on OpenPGP.<\/p><p>We'd need a crypto-agile age for signatures.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-06-14:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/chaos.social\/users\/neverpanic\/statuses\/115814292377805420","object":{"id":"https:\/\/chaos.social\/users\/neverpanic\/statuses\/115814292377805420","objectType":"note","content":"<p><a href=\"https:\/\/furry.engineer\/@soatok\" class=\"u-url mention\">@soatok<\/a> Wholeheartedly agree. But: For the distro package signing problem, minisign doesn't support PQC or crypto agility (ed25519 wasn't FIPS until recently, Common Criteria requires curves &gt;= 384), sigstore doesn't have PQC either, only a Go implementation (no FIPS until recently), and it's offline verification is somewhat lacking AIUI.<\/p><p>That's the reason we're still on OpenPGP.<\/p><p>We'd need a crypto-agile age for signatures.<\/p>","url":"https:\/\/chaos.social\/@neverpanic\/115814292377805420","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/furry.engineer\/users\/soatok\/statuses\/115808748322802252","url":"https:\/\/furry.engineer\/@soatok\/115808748322802252"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/furry.engineer\/users\/soatok"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2025-12-30:objectType=thread:nonce=1fe3b2483db9ca61","notice_info":{"local_id":"11834023","source":"ActivityPub"}},"published":"2026-01-01T21:14:49+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/chaos.social\/@neverpanic\/115814292377805420"},{"actor":{"id":"https:\/\/chaos.social\/users\/neverpanic","displayName":"Clemens","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/251115-original-tmp20240322063122.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/251115-96-20240322063122.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/251115-48-20240322063122.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/251115-24-20240322063122.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"251115"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/251115-96-20240322063122.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"MacPorts Developer, PPL\/A, Works at Red Hat on Cryptographysearchable","url":"https:\/\/chaos.social\/@neverpanic","portablecontacts_net":{"preferredUsername":"neverpanic","displayName":"Clemens","note":"MacPorts Developer, PPL\/A, Works at Red Hat on Cryptographysearchable"}},"content":"<p><a href=\"https:\/\/fosstodon.org\/@simo5\" class=\"u-url mention\">@simo5<\/a> <a href=\"https:\/\/infosec.exchange\/@sophieschmieg\" class=\"u-url mention\">@sophieschmieg<\/a> <a href=\"https:\/\/furry.engineer\/@soatok\" class=\"u-url mention\">@soatok<\/a> It seemed to me as if tink does at least some of those things, although I have to admit it wasn't obvious until I started reading the \"Overview &gt; Understand key concepts\" docs.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-06-14:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/chaos.social\/users\/neverpanic\/statuses\/115819677241033557","object":{"id":"https:\/\/chaos.social\/users\/neverpanic\/statuses\/115819677241033557","objectType":"note","content":"<p><a href=\"https:\/\/fosstodon.org\/@simo5\" class=\"u-url mention\">@simo5<\/a> <a href=\"https:\/\/infosec.exchange\/@sophieschmieg\" class=\"u-url mention\">@sophieschmieg<\/a> <a href=\"https:\/\/furry.engineer\/@soatok\" class=\"u-url mention\">@soatok<\/a> It seemed to me as if tink does at least some of those things, although I have to admit it wasn't obvious until I started reading the \"Overview &gt; Understand key concepts\" docs.<\/p>","url":"https:\/\/chaos.social\/@neverpanic\/115819677241033557","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/fosstodon.org\/users\/simo5\/statuses\/115819563801233093","url":"https:\/\/gnusocial.jp\/notice\/11834026"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/furry.engineer\/users\/soatok"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/infosec.exchange\/users\/sophieschmieg"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/fosstodon.org\/users\/simo5"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2025-12-30:objectType=thread:nonce=1fe3b2483db9ca61","notice_info":{"local_id":"11834027","source":"ActivityPub"}},"published":"2026-01-01T21:14:48+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/chaos.social\/@neverpanic\/115819677241033557"},{"actor":{"id":"https:\/\/fosstodon.org\/users\/simo5","displayName":"Simo \u2714\ufe0f","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/293424-original-tmp20260101165623.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/293424-96-20260101165707.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/293424-48-20260101165707.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/293424-24-20260101165707.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"293424"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/293424-96-20260101165707.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Cryptography Team @ Red Hat","url":"https:\/\/fosstodon.org\/@simo5","portablecontacts_net":{"preferredUsername":"simo5","displayName":"Simo \u2714\ufe0f","note":"Cryptography Team @ Red Hat"}},"content":"<p><a href=\"https:\/\/infosec.exchange\/@sophieschmieg\" class=\"u-url mention\">@sophieschmieg<\/a> <a href=\"https:\/\/chaos.social\/@neverpanic\" class=\"u-url mention\">@neverpanic<\/a> <a href=\"https:\/\/furry.engineer\/@soatok\" class=\"u-url mention\">@soatok<\/a> we do not lack good cryptographic libraries, but a good signature format schemes that works fully offline and does not try to impose complicated\/online setups both for signing and verification.<\/p><p>I find sigstore exceedengly complicated for simple software signing cases for example.<\/p><p>I do not mind additional transparency ledgers or assurances if they are additive properties.<\/p><p>Algoritmic agility and design that makes it easy to use with HSMs is a must.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-06-14:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/fosstodon.org\/users\/simo5\/statuses\/115819563801233093","object":{"id":"https:\/\/fosstodon.org\/users\/simo5\/statuses\/115819563801233093","objectType":"note","content":"<p><a href=\"https:\/\/infosec.exchange\/@sophieschmieg\" class=\"u-url mention\">@sophieschmieg<\/a> <a href=\"https:\/\/chaos.social\/@neverpanic\" class=\"u-url mention\">@neverpanic<\/a> <a href=\"https:\/\/furry.engineer\/@soatok\" class=\"u-url mention\">@soatok<\/a> we do not lack good cryptographic libraries, but a good signature format schemes that works fully offline and does not try to impose complicated\/online setups both for signing and verification.<\/p><p>I find sigstore exceedengly complicated for simple software signing cases for example.<\/p><p>I do not mind additional transparency ledgers or assurances if they are additive properties.<\/p><p>Algoritmic agility and design that makes it easy to use with HSMs is a must.<\/p>","url":"https:\/\/gnusocial.jp\/notice\/11834026","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/infosec.exchange\/users\/sophieschmieg\/statuses\/115814846617834915","url":"https:\/\/infosec.exchange\/@sophieschmieg\/115814846617834915"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/furry.engineer\/users\/soatok"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/infosec.exchange\/users\/sophieschmieg"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/chaos.social\/users\/neverpanic"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2025-12-30:objectType=thread:nonce=1fe3b2483db9ca61","notice_info":{"local_id":"11834026","source":"ActivityPub"}},"published":"2026-01-01T21:14:48+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/gnusocial.jp\/notice\/11834026"},{"actor":{"id":"https:\/\/infosec.exchange\/users\/sophieschmieg","displayName":"Sophie Schmieg","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/41310-original-tmp20240930181542.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/41310-96-20241001225805.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/41310-48-20241001225805.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/41310-24-20241001225805.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"41310"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/41310-96-20241001225805.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Leading cryptography (ISE Crypto) at Google.Opinions my own.Content usually badly explained mathematics","url":"https:\/\/infosec.exchange\/@sophieschmieg","portablecontacts_net":{"preferredUsername":"sophieschmieg","displayName":"Sophie Schmieg","note":"Leading cryptography (ISE Crypto) at Google.Opinions my own.Content usually badly explained mathematics"}},"content":"<p><a href=\"https:\/\/chaos.social\/@neverpanic\" class=\"u-url mention\">@neverpanic<\/a> <a href=\"https:\/\/furry.engineer\/@soatok\" class=\"u-url mention\">@soatok<\/a> tbf, the PQC specs came out about a year ago, and FIPS takes about a year. We'll see a lot more FIPS validated implementations across the board in 2026.<\/p><p>When it comes to crypto agility, have you tried Tink (<a href=\"https:\/\/developers.google.com\/tink\" rel=\"nofollow\">https:\/\/developers.google.com\/tink<\/a>)? It is IMHO the far superior way to solve this issue (full disclosure, it is developed by my team, so I'm extremely biased)<\/p>","generator":{"id":"tag:gnusocial.jp,2026-06-14:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/infosec.exchange\/users\/sophieschmieg\/statuses\/115814846617834915","object":{"id":"https:\/\/infosec.exchange\/users\/sophieschmieg\/statuses\/115814846617834915","objectType":"note","content":"<p><a href=\"https:\/\/chaos.social\/@neverpanic\" class=\"u-url mention\">@neverpanic<\/a> <a href=\"https:\/\/furry.engineer\/@soatok\" class=\"u-url mention\">@soatok<\/a> tbf, the PQC specs came out about a year ago, and FIPS takes about a year. We'll see a lot more FIPS validated implementations across the board in 2026.<\/p><p>When it comes to crypto agility, have you tried Tink (<a href=\"https:\/\/developers.google.com\/tink\" rel=\"nofollow\">https:\/\/developers.google.com\/tink<\/a>)? It is IMHO the far superior way to solve this issue (full disclosure, it is developed by my team, so I'm extremely biased)<\/p>","url":"https:\/\/infosec.exchange\/@sophieschmieg\/115814846617834915","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/chaos.social\/users\/neverpanic\/statuses\/115814292377805420","url":"https:\/\/chaos.social\/@neverpanic\/115814292377805420"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/furry.engineer\/users\/soatok"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/chaos.social\/users\/neverpanic"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2025-12-30:objectType=thread:nonce=1fe3b2483db9ca61","notice_info":{"local_id":"11834025","source":"ActivityPub"}},"published":"2026-01-01T21:14:48+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/infosec.exchange\/@sophieschmieg\/115814846617834915"},{"actor":{"id":"https:\/\/fosstodon.org\/users\/simo5","displayName":"Simo \u2714\ufe0f","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/293424-original-tmp20260101165623.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/293424-96-20260101165707.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/293424-48-20260101165707.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/293424-24-20260101165707.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"293424"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/293424-96-20260101165707.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Cryptography Team @ Red Hat","url":"https:\/\/fosstodon.org\/@simo5","portablecontacts_net":{"preferredUsername":"simo5","displayName":"Simo \u2714\ufe0f","note":"Cryptography Team @ Red Hat"}},"content":"<p><a href=\"https:\/\/chaos.social\/@neverpanic\" class=\"u-url mention\">@neverpanic<\/a> <a href=\"https:\/\/infosec.exchange\/@sophieschmieg\" class=\"u-url mention\">@sophieschmieg<\/a> <a href=\"https:\/\/furry.engineer\/@soatok\" class=\"u-url mention\">@soatok<\/a> it is not clear that it defines a signatire standard, seem like it only offers a signature API.<br \/>Have to say the presentation is quite vague.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-06-14:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/fosstodon.org\/users\/simo5\/statuses\/115819975805743988","object":{"id":"https:\/\/fosstodon.org\/users\/simo5\/statuses\/115819975805743988","objectType":"note","content":"<p><a href=\"https:\/\/chaos.social\/@neverpanic\" class=\"u-url mention\">@neverpanic<\/a> <a href=\"https:\/\/infosec.exchange\/@sophieschmieg\" class=\"u-url mention\">@sophieschmieg<\/a> <a href=\"https:\/\/furry.engineer\/@soatok\" class=\"u-url mention\">@soatok<\/a> it is not clear that it defines a signatire standard, seem like it only offers a signature API.<br \/>Have to say the presentation is quite vague.<\/p>","url":"https:\/\/gnusocial.jp\/notice\/11834028","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/chaos.social\/users\/neverpanic\/statuses\/115819677241033557","url":"https:\/\/chaos.social\/@neverpanic\/115819677241033557"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/furry.engineer\/users\/soatok"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/infosec.exchange\/users\/sophieschmieg"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/chaos.social\/users\/neverpanic"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2025-12-30:objectType=thread:nonce=1fe3b2483db9ca61","notice_info":{"local_id":"11834028","source":"ActivityPub"}},"published":"2026-01-01T21:14:47+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/gnusocial.jp\/notice\/11834028"},{"actor":{"id":"https:\/\/infosec.exchange\/users\/sophieschmieg","displayName":"Sophie Schmieg","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/41310-original-tmp20240930181542.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/41310-96-20241001225805.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/41310-48-20241001225805.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/41310-24-20241001225805.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"41310"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/41310-96-20241001225805.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Leading cryptography (ISE Crypto) at Google.Opinions my own.Content usually badly explained mathematics","url":"https:\/\/infosec.exchange\/@sophieschmieg","portablecontacts_net":{"preferredUsername":"sophieschmieg","displayName":"Sophie Schmieg","note":"Leading cryptography (ISE Crypto) at Google.Opinions my own.Content usually badly explained mathematics"}},"content":"<p><a href=\"https:\/\/fosstodon.org\/@simo5\" class=\"u-url mention\">@simo5<\/a> <a href=\"https:\/\/chaos.social\/@neverpanic\" class=\"u-url mention\">@neverpanic<\/a> <a href=\"https:\/\/furry.engineer\/@soatok\" class=\"u-url mention\">@soatok<\/a> this is one of my pet peeve rants: we have signature formats. (Several of them, even). Cryptographic standards define functions that map a collection of byte strings to some other byte strings. Files can store byte strings. What we are somewhat lacking is fully specified public key formats, but even that we have some (Tink defines it's own and can read\/write many of the existing formats). The signature should just be the byte string given as the output of the signing algorithm. It's the public key that needs the information for verifying the signature. <\/p><p>So if I give you a public key (including a definition of the full algorithm used, all the hash functions and security parameters etc), then you can verify a signature. <\/p><p>If you want crypto agility, then the thing you need is support for key sets, i.e. multiple, equally trusted keys. That allows you to add, promote, and delete keys in a distributed environment. You have two options for the signature format in this case (and Tink supports both): either you keep the unmodified signature, try all public keys and call the signature verified if it verified under one of the public keys (great for comparability), or you put a short and meaningless identifier in front of the signature, which allows you to directly jump to the right public key. Better performance, but not compatible with libraries that don't support key sets in the same way. <\/p><p>In both cases, this composite algorithm retains EUF-CMA\/SUF-CMA as long as all keys in the key set are trusted and have EUF-CMA\/SUF-CMA.<\/p><p>Interestingly, pretty much all other types of signature formats, such as JWT (and as far as I know PGP) violate EUF-CMA and definitely violate SUF-CMA, so I argue (fairly strongly, given all the attacks due to these violations), that the Tink way of supporting key sets and signatures is the correct approach.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-06-14:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/infosec.exchange\/users\/sophieschmieg\/statuses\/115821640913890344","object":{"id":"https:\/\/infosec.exchange\/users\/sophieschmieg\/statuses\/115821640913890344","objectType":"note","content":"<p><a href=\"https:\/\/fosstodon.org\/@simo5\" class=\"u-url mention\">@simo5<\/a> <a href=\"https:\/\/chaos.social\/@neverpanic\" class=\"u-url mention\">@neverpanic<\/a> <a href=\"https:\/\/furry.engineer\/@soatok\" class=\"u-url mention\">@soatok<\/a> this is one of my pet peeve rants: we have signature formats. (Several of them, even). Cryptographic standards define functions that map a collection of byte strings to some other byte strings. Files can store byte strings. What we are somewhat lacking is fully specified public key formats, but even that we have some (Tink defines it's own and can read\/write many of the existing formats). The signature should just be the byte string given as the output of the signing algorithm. It's the public key that needs the information for verifying the signature. <\/p><p>So if I give you a public key (including a definition of the full algorithm used, all the hash functions and security parameters etc), then you can verify a signature. <\/p><p>If you want crypto agility, then the thing you need is support for key sets, i.e. multiple, equally trusted keys. That allows you to add, promote, and delete keys in a distributed environment. You have two options for the signature format in this case (and Tink supports both): either you keep the unmodified signature, try all public keys and call the signature verified if it verified under one of the public keys (great for comparability), or you put a short and meaningless identifier in front of the signature, which allows you to directly jump to the right public key. Better performance, but not compatible with libraries that don't support key sets in the same way. <\/p><p>In both cases, this composite algorithm retains EUF-CMA\/SUF-CMA as long as all keys in the key set are trusted and have EUF-CMA\/SUF-CMA.<\/p><p>Interestingly, pretty much all other types of signature formats, such as JWT (and as far as I know PGP) violate EUF-CMA and definitely violate SUF-CMA, so I argue (fairly strongly, given all the attacks due to these violations), that the Tink way of supporting key sets and signatures is the correct approach.<\/p>","url":"https:\/\/infosec.exchange\/@sophieschmieg\/115821640913890344","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/fosstodon.org\/users\/simo5\/statuses\/115819975805743988","url":"https:\/\/gnusocial.jp\/notice\/11834028"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/furry.engineer\/users\/soatok"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/chaos.social\/users\/neverpanic"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/fosstodon.org\/users\/simo5"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2025-12-30:objectType=thread:nonce=1fe3b2483db9ca61","notice_info":{"local_id":"11834029","source":"ActivityPub"}},"published":"2026-01-01T21:14:46+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/infosec.exchange\/@sophieschmieg\/115821640913890344"},{"actor":{"id":"https:\/\/furry.engineer\/users\/orman","displayName":"Orman","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/284112-original-tmp20240926155754.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/284112-96-20241030182847.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/284112-48-20241121161747.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/284112-24-20241121161747.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"284112"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/284112-96-20241030182847.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Programming dragon from \ud83c\udff4\udb40\udc67\udb40\udc62\udb40\udc73\udb40\udc63\udb40\udc74\udb40\udc7f, largely focused on Rust","url":"https:\/\/furry.engineer\/@orman","portablecontacts_net":{"preferredUsername":"orman","displayName":"Orman","note":"Programming dragon from \ud83c\udff4\udb40\udc67\udb40\udc62\udb40\udc73\udb40\udc63\udb40\udc74\udb40\udc7f, largely focused on Rust"}},"content":"<p><a href=\"https:\/\/furry.engineer\/@soatok\" class=\"u-url mention\">@soatok<\/a> <a href=\"https:\/\/fosstodon.org\/@pemensik\" class=\"u-url mention\">@pemensik<\/a> you wouldn't be able to solve all problems but surely you'd still have some improvements if you could eg mandate encrypted payloads<\/p>","generator":{"id":"tag:gnusocial.jp,2026-06-14:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/furry.engineer\/users\/orman\/statuses\/115821873421065432","object":{"id":"https:\/\/furry.engineer\/users\/orman\/statuses\/115821873421065432","objectType":"note","content":"<p><a href=\"https:\/\/furry.engineer\/@soatok\" class=\"u-url mention\">@soatok<\/a> <a href=\"https:\/\/fosstodon.org\/@pemensik\" class=\"u-url mention\">@pemensik<\/a> you wouldn't be able to solve all problems but surely you'd still have some improvements if you could eg mandate encrypted payloads<\/p>","url":"https:\/\/furry.engineer\/@orman\/115821873421065432","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/furry.engineer\/users\/soatok\/statuses\/115808824039697697","url":"https:\/\/furry.engineer\/@soatok\/115808824039697697"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/furry.engineer\/users\/soatok"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/fosstodon.org\/users\/pemensik"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2025-12-30:objectType=thread:nonce=1fe3b2483db9ca61","notice_info":{"local_id":"11833962","source":"ActivityPub"}},"published":"2026-01-01T21:06:13+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/furry.engineer\/@orman\/115821873421065432"}],"links":[{"url":"https:\/\/gnusocial.jp\/conversation\/6005024","rel":"alternate","type":"text\/html"}]}