Untitled attachment

Notices where this attachment appears

1. Embed this notice
   silverpill (silverpill@mitra.social)'s status on Saturday, 09-Aug-2025 04:39:00 JST silverpill

   in reply to

   @mariusor @Marius Example:

   { "type": "Create", "actor": "https://social.example/actor1", "object": { "type": "Key", "owner": "https://social.example/actor2" "publicKeyPem": "..." } }

   This key is created by actor1, who controls the secret key. But it is owned by actor2. This means actor1 can sign requests using the secret key and everyone will think they are signed by actor2.