This key is created by actor1, who controls the secret key. But it is owned by actor2. This means actor1 can sign requests using the secret key and everyone will think they are signed by actor2.
Embed Notice
HTML Code
Corresponding Notice
- Embed this notice
silverpill (silverpill@mitra.social)'s status on Saturday, 09-Aug-2025 04:39:00 JST
silverpill{ "type": "Create", "actor": "https://social.example/actor1", "object": { "type": "Key", "owner": "https://social.example/actor2" "publicKeyPem": "..." } }