Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
Ruud (ruud@mastodon.world)'s status on Thursday, 10-Nov-2022 06:44:47 JST Ruud
- Jeroen
- Rishi Pande ??
Reminder (or maybe eye-opener) to Mastodon users:
Direct Messages on Mastodon are NOT encrypted.
What does this mean: The message is in the database un-encrypted. Anyone with access to the database could potentially read the messages.
For mastodon.world, only the admins have database access (@jeroen, @spaceriker and myself).
If you have really sensitive info, don't share it on Mastodon. There are secure messaging apps for that.

In conversation Thursday, 10-Nov-2022 06:44:47 JST from mastodon.world permalink
- CHISE Project (Morioka Tomohiko) likes this.
- Embed this notice
  藤井太洋, Taiyo Fujii (taiyo@ostatus.taiyolab.com)'s status on Thursday, 10-Nov-2022 06:57:46 JST 藤井太洋, Taiyo Fujii
  in reply to
  - Jeroen
  - Rishi Pande ??
  @ruud @spaceriker @jeroen
  It's a good reminding. I'm going share every months.
  
  In conversation Thursday, 10-Nov-2022 06:57:46 JST permalink
- Embed this notice
  藤井太洋, Taiyo Fujii (taiyo@ostatus.taiyolab.com)'s status on Thursday, 10-Nov-2022 08:26:00 JST 藤井太洋, Taiyo Fujii
  in reply to
  - Jeroen
  - Rishi Pande ??
  @spaceriker @jeroen @ruud
  I wrote a novella about developing E2E crypt transporting on Mastodon when Twitter obeys to Chinese censorship, and won Japanese traditional literally award in 2017.
  DM encryption had been the most prominent theme since then.
  If Mastodon offers web client based vital delivery system, it would be the biggest innovative one after OAuth.
  
  In conversation Thursday, 10-Nov-2022 08:26:00 JST permalink
- Embed this notice
  藤井太洋, Taiyo Fujii (taiyo@ostatus.taiyolab.com)'s status on Thursday, 10-Nov-2022 08:30:23 JST 藤井太洋, Taiyo Fujii
  in reply to
  @spaceriker @jeroen @ruud
  oh!
  @Gargron
  already implemented!
  https://github.com/tootsuite/mastodon/pull/13820
  In conversation Thursday, 10-Nov-2022 08:30:23 JST permalink
  Attachments
  1. Domain not in remote thumbnail source whitelist: opengraph.githubassets.com
    
    Add end-to-end encryption API by Gargron · Pull Request #13820 · mastodon/mastodon
    
    Fix #1093 A set of APIs required for the double ratchet encryption algorithm, specifically the Olm implementation developed by Matrix -- but it should be roughly the same as libsignal. An additiona...
- Embed this notice
  Cherry Sandwich (cherrysandwich@mastodon.world)'s status on Monday, 05-Dec-2022 23:26:38 JST Cherry Sandwich
  in reply to
  - Signal
  @ruud I only trust @signalapp with my direct communication.
  
  In conversation Monday, 05-Dec-2022 23:26:38 JST permalink

Public

Conversation

Notices

Feeds