Conversation

Notices

1. Embed this notice
   silverpill (silverpill@mitra.social)'s status on Tuesday, 05-Sep-2023 14:07:16 JST silverpill

   • Justin Thomas 🛡

   @justin I recommend FEP-8b32 integrity proofs instead of legacy Linked Data Signatures. FEP-8b32 is based on actual W3C standard and uses JCS canonicalization algorithm which is simpler than RDF.

   Here's my implementation in Rust: https://codeberg.org/silverpill/mitra/src/commit/bc4d5fc957f9702c281a969d2fe17ef33ceceab0/mitra-json-signatures/src/create.rs

   Linked Data Signatures still can be found in Fediverse but they are not used for anything important so you can safely ignore them.

   • Embed this notice
     silverpill (silverpill@mitra.social)'s status on Tuesday, 05-Sep-2023 14:49:51 JST silverpill

     in reply to

     • Justin Thomas 🛡

     @justin These are coming from deleted actors (type == Delete and actor == object.id)

     I think HTTP signatures should be correct. The server should not try to fetch the actor, but otherwise such Delete can be processed like any other activity.

   • Embed this notice
     Justin Thomas 🛡 (justin@ser.endipito.us)'s status on Tuesday, 05-Sep-2023 14:49:57 JST Justin Thomas 🛡

     in reply to

     @silverpill Thanks for the suggestion. I see a ton of Delete messages from Mastodon that seem to rely on the RsaSignature2017 signatures. Or maybe those are superfluous and they'll work with just the HTTP signature - I'll test that.