Untitled attachment

Notices where this attachment appears

1. Embed this notice
   zunda (zundan@mastodon.zunda.ninja)'s status on Wednesday, 30-Nov-2022 15:54:47 JST zunda

   in reply to

   joinmastodonのドキュメントをざっと読むと基本的には現在の公開鍵を投稿元のサーバからもらってきて署名の検証に利用し、投稿元のアカウントが既に存在しないDeleteアクティビティを受け取った時だけローカルにキャッシュしている公開鍵を検証に利用するようにも見える。ふむふむ。
   https://docs.joinmastodon.org/spec/security/

2. Embed this notice
   Hélène (helene@p.helene.moe)'s status on Wednesday, 14-Sep-2022 18:44:26 JST Hélène

   in reply to
   @ukko https://docs.joinmastodon.org/spec/security/ seriously look at this i'm so upset
3. Embed this notice
   Hélène (helene@p.helene.moe)'s status on Wednesday, 17-Aug-2022 02:00:41 JST Hélène

   in reply to

   @trwnh hmm, that is odd then, and I believe Gargron@mastodon.social was the one to have introduced HTTP signatures into ActivityPub with Mastodon, but I may be wrong here? (I’d mention him, but I don’t wanna disturb, but he probably would be the one with answers regarding this)

   There’s no mention on how to build the keyId on https://docs.joinmastodon.org/spec/security/, which seems to be mostly regarded as “the spec” on that subject

   but considering what you’re highlighting, it would seem it should be done this way instead, yes