Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://fed.brid.gy/r/https://snarfed.org/2025-02-25_raphael-lullis-julien51-do-you-mean-that-i-mastodon-cloud">Ryan Barrett (snarfed.org@fed.brid.gy)'s status on Wednesday, 26-Feb-2025 06:59:34 JST</a><a href="https://fed.brid.gy/r/https://snarfed.org/" title="snarfed.org@fed.brid.gy"><img src="https://gnusocial.jp/avatar/121991-48-20231020213632.webp" width="48" height="48" alt="Ryan Barrett" style="position: absolute; left: 0; top: 0;">Ryan Barrett</a><div><a href="https://mastodon.communick.com/@raphael/114064874891243849" rel="in-reply-to">in reply to</a><ul><li></ul></div></section><article><p>In practice on the fediverse today, as <a href="https://communick.com/@raphael">@raphael</a> says, most fediverse servers do custodial keys. Client-managed keys and signing are still possible though! See <a href="https://mitra.social/@silverpill">@silverpill</a>'s <a href="https://codeberg.org/fediverse/fep/src/branch/main/fep/ae97/fep-ae97.md">FEP-ae97</a> on client signing. LD Signatures are also relevant; they're not ubiquitous like HTTP Sigs, but still somewhat common, eg <a href="https://docs.joinmastodon.org/spec/security/#ld">Mastodon does them</a>. <a href="https://swicg.github.io/activitypub-http-signature/#so-what-s-the-verdict">Also see the SWICG HTTP Sigs report.</a>
</p><p>cc <a href="https://mastodon.cloud/@Julien51">@Julien51</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/4631369#notice-9065590">In conversation</a><time datetime="2025-02-26T06:59:34+09:00" title="Wednesday, 26-Feb-2025 06:59:34 JST">about a month ago</time> <span>from <span><a href="https://fed.brid.gy/r/https://snarfed.org/2025-02-25_raphael-lullis-julien51-do-you-mean-that-i-mastodon-cloud" rel="external" title="Sent from fed.brid.gy via ActivityPub">fed.brid.gy</a></span></span><a href="https://fed.brid.gy/r/https://snarfed.org/2025-02-25_raphael-lullis-julien51-do-you-mean-that-i-mastodon-cloud">permalink</a></footer></blockquote>

Corresponding Notice

Embed this notice
Ryan Barrett (snarfed.org@fed.brid.gy)'s status on Wednesday, 26-Feb-2025 06:59:34 JSTRyan Barrett
in reply to
- Julien Genestoux
In practice on the fediverse today, as @raphael says, most fediverse servers do custodial keys. Client-managed keys and signing are still possible though! See @silverpill's FEP-ae97 on client signing. LD Signatures are also relevant; they're not ubiquitous like HTTP Sigs, but still somewhat common, eg Mastodon does them. Also see the SWICG HTTP Sigs report.
cc @Julien51
In conversationabout a month ago from fed.brid.gypermalink

Public

Embed Notice

HTML Code

Corresponding Notice