Untitled attachment

silverpill (silverpill@mitra.social)'s status on Tuesday, 10-Jun-2025 20:14:15 JST

This is an activity I received:

I can verify the activity, but not its object.

Canonicalized object (with proof taken out):

{"attributedTo":"https://macgirvin.com/.well-known/apgateway/did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk/actor","canReply":["https://macgirvin.com/.well-known/apgateway/did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk/actor/followers"],"cc":[],"content":"@!<span class=\"h-card\"><a class=\"u-url mention\" href=\"https://mitra.social/users/silverpill\" target=\"_blank\" rel=\"nofollow noopener\" >silverpill@mitra.social</a></span> Here's an activity that should be signed with RFC9421.","context":"https://macgirvin.com/.well-known/apgateway/did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk/conversation/history/3f3e6efe-9bac-425d-9692-4df179937c5f","contextHistory":"https://macgirvin.com/.well-known/apgateway/did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk/conversation/history/3f3e6efe-9bac-425d-9692-4df179937c5f","directMessage":true,"id":"https://macgirvin.com/.well-known/apgateway/did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk/item/3f3e6efe-9bac-425d-9692-4df179937c5f","published":"2025-06-09T21:22:04Z","replies":"https://macgirvin.com/.well-known/apgateway/did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk/replies/3f3e6efe-9bac-425d-9692-4df179937c5f","source":{"content":"@![url=https://mitra.social/users/silverpill]silverpill[/url] Here's an activity that should be signed with RFC9421.","mediaType":"text/x-multicode"},"tag":[{"href":"https://mitra.social/users/silverpill","name":"@silverpill@mitra.social","type":"Mention"}],"to":["https://mitra.social/users/silverpill"],"type":"Note","url":"https://macgirvin.com/.well-known/apgateway/did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk/item/3f3e6efe-9bac-425d-9692-4df179937c5f"}

Signature base (object and proof config hashes):

3e51edddfe2378d071b6a79f091150b035045e80d053ce180893f000c5fba50197b90ed2cf47016298ae77a9a8572ba32c39e0570aa31c85033f54525af733bb

Embed this notice

Fish of Rage (sun@shitposter.world)'s status on Thursday, 19-Sep-2024 12:51:08 JST

Fish of Rage

800 characters for "hello world", not including assertion method:

```
{
"@context": [
"https://www.w3.org/ns/activitystreams",
"https://w3id.org/security/data-integrity/v1"
],
"id": "https://server.example/activities/1",
"type": "Create",
"actor": "https://server.example/users/alice",
"object": {
"id": "https://server.example/objects/1",
"type": "Note",
"attributedTo": "https://server.example/users/alice",
"content": "Hello world"
},
"proof": {
"@context": [
"https://www.w3.org/ns/activitystreams",
"https://w3id.org/security/data-integrity/v1"
],
"type": "DataIntegrityProof",
"cryptosuite": "eddsa-jcs-2022",
"verificationMethod": "https://server.example/users/alice#ed25519-key",
"proofPurpose": "assertionMethod",
"proofValue": "...",
"created": "2023-02-24T23:36:38Z"
}
}
```

Embed this notice

silverpill (silverpill@mitra.social)'s status on Friday, 28-Jun-2024 16:07:40 JST

silverpill

in reply to

@hongminhee Yes, it should be able to verify proofs with injected @context. But it is not injected. Here' the Announce activity, for example:

{ "@context": [ "https://www.w3.org/ns/activitystreams", "https://w3id.org/security/data-integrity/v1", { "Emoji": "toot:Emoji", "Hashtag": "as:Hashtag", "sensitive": "as:sensitive", "toot": "http://joinmastodon.org/ns#" } ], "actor": "https://hollo.social/@fedify", "cc": [ "https://fosstodon.org/users/hongminhee", "https://hollo.social/@fedify/followers", "https://fosstodon.org/users/hongminhee" ], "id": "https://hollo.social/@fedify/01905d94-a20b-7722-94d1-576817dd3b00#activity", "object": "https://fosstodon.org/users/hongminhee/statuses/112692842178962546", "proof": { "created": "2024-06-28T06:58:47.16192715Z", "cryptosuite": "eddsa-jcs-2022", "proofPurpose": "assertionMethod", "proofValue": "z4xV1JV4JFuoPcLBNBTDbkceyPdd3YGWdFU4oawZDX5qSxiKeJgjFMf3uwf71QCfNUmJay66g9556K6NjUUUxZu1g", "type": "DataIntegrityProof", "verificationMethod": "https://hollo.social/@fedify#key-2" }, "published": "2024-06-28T06:42:20.3Z", "to": "as:Public", "type": "Announce" }

Embed this notice

silverpill (silverpill@mitra.social)'s status on Wednesday, 14-Jun-2023 21:00:07 JST

silverpill

in reply to

@mariusor I can't provide the full request, but I could say that it had RSA HTTP signature attached.

The inbox was https://federated.id/actors/8b740680-ccb4-4265-82e7-4ac2ca402750/inbox
And the response was 201 Created with empty body.

Here is my unsigned Follow activity:

{"@context":["https://www.w3.org/ns/activitystreams","https://w3id.org/security/ v1","https://w3id.org/security/data-integrity/v1",{"MitraJcsRsaSignature2022":"mitra:MitraJcsRsaSignature2022","mitra":"http://jsonld.mitra.social#","proofPurpose":"sec:pr oofPurpose","proofValue":"sec:proofValue","sensitive":"as:sensitive","verificationMethod":"sec:verificationMethod"}],"actor":"https://mitra.social/users/silverpill","id":" https://mitra.social/objects/0188b5b0-829e-aadd-be8d-a5f484fceb34","object":"https://federated.id/actors/8b740680-ccb4-4265-82e7-4ac2ca402750","to":["https://federated.id/ actors/8b740680-ccb4-4265-82e7-4ac2ca402750"],"type":"Follow"}

Public

Notices where this attachment appears