This thread talks about going back to an #ActivityPub users's home server to validate a user's content, because you can't trust that the event you got for it is unmodified.
-
RE: https://indieweb.social/@laurenshof/116103545853411360
This thread talks about going back to an #ActivityPub users's home server to validate a user's content, because you can't trust that the event you got for it is unmodified.
But you can't trust what the home server tells you the content of the message is either! There's nothing stopping a home server from serving a modified version of your content every time it's requested, say, to inject ads into it, or censor bits it doesn't like.
Or to just completely fabricate new content from you.
-
T tag-activitypub@relay.fedi.buzz shared this topic
-
RE: https://indieweb.social/@laurenshof/116103545853411360
This thread talks about going back to an #ActivityPub users's home server to validate a user's content, because you can't trust that the event you got for it is unmodified.
But you can't trust what the home server tells you the content of the message is either! There's nothing stopping a home server from serving a modified version of your content every time it's requested, say, to inject ads into it, or censor bits it doesn't like.
Or to just completely fabricate new content from you.
This, plus account portability, were things I had in mind while developing #diskuto
-
RE: https://indieweb.social/@laurenshof/116103545853411360
This thread talks about going back to an #ActivityPub users's home server to validate a user's content, because you can't trust that the event you got for it is unmodified.
But you can't trust what the home server tells you the content of the message is either! There's nothing stopping a home server from serving a modified version of your content every time it's requested, say, to inject ads into it, or censor bits it doesn't like.
Or to just completely fabricate new content from you.
It's harder to impersonate a user if content is signed at the client side and the server don't know the secret key:
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login