Conversation

Notices

1. Embed this notice
   lainy (lain@lain.com)'s status on Tuesday, 06-May-2025 16:14:41 JST lainy
   > (Many fediverse servers do process incoming activities asynchronously, but they generally still verify signatures synchronously, so double knocking is still viable when delivering activities to remote inboxes.)
   
   what is the point of this? what are the issues with the current httpsig system?
   • Embed this notice
     Yonle (yonle@fedi.lecturify.net)'s status on Tuesday, 06-May-2025 16:19:16 JST Yonle

     in reply to
     @lain meanwhile, i am struggling on how 2 implement activitypub, that somehow ended up making my own federation protocol :nkoFacepalm:
     lainy likes this.
   • Embed this notice
     tedu (tedu@honk.tedunangst.com)'s status on Tuesday, 06-May-2025 16:24:10 JST tedu

     in reply to

     @lain i'm ignoring that. will send old sigs until something needs to change, and then it will be all new.

     Phantasm likes this.
   • Embed this notice
     lainy (lain@lain.com)'s status on Tuesday, 06-May-2025 16:24:43 JST lainy

     in reply to

     • tedu
     @tedu i'm going back to ostatus and xml
     Phantasm likes this.
   • Embed this notice
     tedu (tedu@honk.tedunangst.com)'s status on Tuesday, 06-May-2025 16:27:13 JST tedu

     in reply to

     @lain to be honest, the upgrade treadmill for AP hasn't been that bad. in six years, we got auth fetch, and that's kinda it?

     lainy likes this.
   • Embed this notice
     ロミンちゃん (romin@shitposter.world)'s status on Tuesday, 06-May-2025 16:49:27 JST ロミンちゃん

     in reply to

     • tedu
     @lain @tedu
     >xml
     ew
     Phantasm likes this.
   • Embed this notice
     Adam Nelson (adam@toot.nels.onl)'s status on Wednesday, 07-May-2025 02:41:39 JST Adam Nelson

     in reply to

     @lain Maybe it's a graceful-degradation way to upgrade from RSA signatures to Ed25519? Mastodon doesn't understand Ed25519 sigs, but some other servers do (I know Honk does, since I studied Honk's implementation for one of my projects)

     lainy likes this.
   • Embed this notice
     silverpill (silverpill@mitra.social)'s status on Wednesday, 07-May-2025 03:38:16 JST silverpill

     in reply to

     • Adam Nelson

     @adam @lain The double knocking part still doesn't make sense to me. They can implement RFC-9421 verification, wait for other implementers to do the same, and then switch to RFC-9421 signing.

   • Embed this notice
     silverpill (silverpill@mitra.social)'s status on Wednesday, 07-May-2025 03:42:57 JST silverpill

     in reply to

     @lain All those developers hired by Mastodon Inc. can't just sit there doing nothing.

     lainy and Phantasm like this.