I look forward to working with @benpate, @Bonfire and @evan from the SWF on E2EE Direct Messages in Loops, Pixelfed and Sup!

They’re doing some amazing work, and it makes a lot of sense to collaborate and widen compatibility across our platforms!

#ActivityPub #E2EE

FitPub is a new fitness tracking platform for the Fediverse, sort of an alternative to Strava. You can follow their official account for more news:

➡️ @fitpub

There are also more details on FitPub's Codeberg page:

➡️ https://codeberg.org/fitpub/fitpub

(To avoid confusion, FitPub is a totally separate project to the Fediverse trail and journey tracker Wanderer, which you can find out more about at https://wanderer.to )

#Fitness #FitnessTracker #Fediverse #ActivityPub #FitPub #Strava #Alternatives

I'm surprised at how many issues my new integration tests are finding.

I already had an integration testsuite, but the way the #fedbox application was run was not in full isolation, and I expect some of the setup steps I had included don't really exist on a fresh install.

We now build a fresh container image, start it up, provision it with mock data, and then run tests, but only through mechanisms that are available to a prospective server operator: CLI commands executed through SSH, and ActivityPub client to server operations.

#fedidev #activityPubDev #activitypub

Can WebFinger resolve subject to a different domain?

My immediate assumption is yes, it can, because someone may use a specific domain merely as a gateway, and point to a different domain for resolution.

e.g. https://activitypub.directory/.well-known/webfinger?resource=acct:julian@activitypub.space (note the different TLD)

Resolving to:

{"subject":"acct:julian@activitypub.space","aliases":["https://activitypub.space/uid/1","https://activitypub.space/user/julian"],"links": ...

However, this is a potential security issue because said directory could then poison the resulting data, especially if cached by a user of that webfinger directory.

Am I wrong about that? In the meantime I've updated NodeBB's code to strictly enforce webfinger lookups so if a response subject has a different hostname, then the webfinger query result is considered invalid.[...]

Honored to be one of ten maintainers in the first @sovtechfund standards cohort.

I'll be representing #ActivityPub and the #fediverse at the w3c, bringing eight years of running Pixelfed and Loops at scale into the room where the spec gets written.

https://www.sovereign.tech/news/meet-the-first-sovereign-tech-standards-cohort

#SovereignTech

Today is announcement day 🔥

Bonfire is shifting its centre of gravity: from social features to community tools. Four things ship today, and the whole story is here: bonfirenetworks.org/posts/bo...

1. Bonfire for communities
Groups and topics, community rules, decision-making (from quick polls through structured consensus to weighted score voting, where an objection can count for more than an approval), events, shared organisation profiles, announcements.

A ready-to-use space you can then take apart: add what's missing, fork what almost fits, switch off what you don't need.

2. Our first Mosaic case study
Six months with Jacobin's German edition, building jacobin.social from the ground up: a home for 3,000+ readers, wired into their Ghost publication, in their language and their look and feel. Their readers crowdfunded the project, which included a reboot of the magazine and a new community space. Now every publisher can benefit. What one community funds, every community inherits. Details: bonfirenetworks.org/case-stu...

3. A deep Ghost integration
Keep publishing exactly as you do now, and Bonfire can become the home for everything that happens around the work: your archive imported, new articles followed, members and tiers synced, sign-in through Ghost, federated discussion under every piece. Details: bonfirenetworks.org/ghost/

4. The Telling
One script tag turns any web page into a federated conversation. Readers reply with an account they already have, on Bonfire, Mastodon, anywhere. The thread lives on your server, and you can take it with you. Details: bonfirenetworks.org/telling/

Being straight with you: this is a 1.0 beta. Groups work within a server and don't federate yet. We're designing that in the open with the W3C groups task force, because we'd rather it work across the whole fediverse than ship a dialect only Bonfire speaks.

Want to poke at it? Groups are live on the campground, our open test instance. Make an account and try it out: campground.bonfire.cafe

Finally, we've rebuilt the website to reflect the new direction: bonfirenetworks.org/

Now back to following up with crowdfunding backers to organise install parties, co-design workshops, and other rewards. Thank you for your patience 💛 #fediverse #ActivityPub

Most people want to have private online conversations. Some also want to post publicly. I get wanting to be able to use the same account for both but trying to let everyone do so seems to be creating more problems than it solves. Lots of confusion and anger and tons of effort to build in more nuance and moderation capacity to the tools we already have and need to keep somewhat simple to encourage adoption.

Perhaps build on #matrix and #ActivityPub separately. Have users list both accounts.

@liaizon #Bridgy is the incumbent on the #ActivityPub / #ATProto bridging front, and currently the only "production grade" system available to the general user, right ?

Asking for a project:
What does one use nowadays to simultaneously post & interact with #ActivityPub & #ATProto?

https://fed.brid.gy/ is great, but not what I'm looking for...

@collective_truth

You might add an issue to their tracker to make them aware of that. I did that a lot in the past, or added info to existing issues. It works. Most recent project to implement #ActivityPub and join the #fediverse on this basis was #Vutuv, a jobs social network (LinkedIn alternative). I also just added an Instant messengers category to the delightful fediverse experience curated list..

https://social.coop/@smallcircles/116973510439074056

🫧 Social coding commons boosted

🫧 Social coding commons » 🌐 2026-07-24
@smallcircles@social.coop

Major updates were made to the delightful fediverse curated lists..

💎 delightful fediverse experience

- 52 new projects added
- 50 projects marked unmaintained
- 15 projects updated

New list categories:

- Professional networks
- Instant messaging
- Search engines
- Security and privacy

https://delightful.coding.social/delightful-fediverse-experience

💎 delightful fediverse development

- 18 new projects added
- 20 projects marked unmaintained
- 5 projects updated
- 7 projects removed
- Improved table of contents
- Listed SWICG / SocialCG task forces
- More improvements pending

New list categories:

- SWICG Task forces
- Data portability
- Developer hubs
- Data formats

https://delightful.coding.social/delightful-fediverse-development

💎 delightful fediverse clients

- 16 new projects added
- 33 projects marked unmaintained
- 5 projects updated
- 3 projects removed
- Separate section for unmaintained

https://delightful.coding.social/delightful-fediverse-clients

#ActivityPub #SocialWeb #fediverse

#Open #protocol called #Oscar (from #AIM #Messanger) still lives and maybe could be integrated to #Mastodon #activitypub ! :)

1/ Wikipedia: https://en.wikipedia.org/wiki/OSCAR_protocol

#AIM #Messenger #Pidgin #XMPP #Trillian, #PsiIM, #Gajim #ICQ #Mastodon #Jitsi etc

2/ GitHub: https://github.com/mk6i/open-oscar-server

3/ Video: https://inv.nadeko.net/watch?v=taDOa2zIhlo

@icaria36

Have a look at the delightful fediverse experience curated list. There's a section on Blogging, and further down the list a section on Wordpress..

https://social.coop/@smallcircles/116973510439074056

#ActivityPub #fediverse #Wordpress #Blogging

🫧 Social coding commons boosted

🫧 Social coding commons » 🌐 2026-07-24
@smallcircles@social.coop

Major updates were made to the delightful fediverse curated lists..

💎 delightful fediverse experience

- 52 new projects added
- 50 projects marked unmaintained
- 15 projects updated

New list categories:

- Professional networks
- Instant messaging
- Search engines
- Security and privacy

https://delightful.coding.social/delightful-fediverse-experience

💎 delightful fediverse development

- 18 new projects added
- 20 projects marked unmaintained
- 5 projects updated
- 7 projects removed
- Improved table of contents
- Listed SWICG / SocialCG task forces
- More improvements pending

New list categories:

- SWICG Task forces
- Data portability
- Developer hubs
- Data formats

https://delightful.coding.social/delightful-fediverse-development

💎 delightful fediverse clients

- 16 new projects added
- 33 projects marked unmaintained
- 5 projects updated
- 3 projects removed
- Separate section for unmaintained

https://delightful.coding.social/delightful-fediverse-clients

#ActivityPub #SocialWeb #fediverse

I have an idea for a blog (or collection of blogs) and I'm thinking of having only federated comments.

Anyway, #WordPress with the #ActivityPub is a possibility, right? I have read about it, I have seen it in action, but I haven't tried it myself as admin or user. Other than this, I was a WP admin years ago and I am familiar with it, although probably outdated too.

Are there other alternatives you would recommend? I'd be happy to consider them.

The project "brief":
https://the.socialmusic.network/t/a-music-selection-idea-welcomes-your-feedback/854/

https://gitlab.com/groups/gitlab-org/-/work_items/11247

Started 2023; last activity I saw was 2 months ago.

#Fediverse #decentralization #gitForge #softwareForge

Week in Fediverse 2026-07-24

Servers

- WriteFreely v0.17.0
- Ktistec v3.9.0
- Vernissage Server v1.41.0
- GoToSocial v0.22.1
- Bookwyrm v0.9.1
- PeerTube v8.2.3
- Lemmy v0.19.20
- ties v0.3
- ActivityPub for WordPress v9.1.0
- NeoDB v0.17.2
- NodeBB v4.14.2
- PieFed v1.7.7
- FitPub v1.2.1
- ActivityForge: ForgeFed implementation in Rust

Clients

- PleromaFE v2.11.1
- Aria v1.5.9
- Pixelix v5.0.0
- Summit v1.83.0
- Jerboa v0.0.88
- Holos v1.15.0
- Rocinante v1.1.8

Tools and Plugins

- Superblock v3.1 (Hubzilla addon)
- Polls for ActivityPub v1.0.10 (WordPress plugin)

Protocol

- FEP-de8d: Emoji Catalogs

Articles

- I added ActivityPub to this blog

-----

#WeekInFediverse #Fediverse #ActivityPub

Previous edition: https://mitra.social/objects/019f71c0-52f2-7b60-a0f7-a9df07a6fd66

@steve

Perhaps it is proper #ActivityPub Groups support. Lemmy already calls that "Community". And perhaps the retracted FEP-2100: Unbound Group and Organization to have Groups be independent of instances / multi-instance spanning, can be implemented in mainstream fedi to have a real fedi native concept of Groups (i.e. the abstract concept, not depending on an implementation detail)..

https://fediverse.codeberg.page/fep/fep/2100

#SiliconBeest looks really interesting! The previous implementation of #ActivityPub on #CloudFlare, #Wildebeest, was kind of a hassle to spin up. I'm interested to see what the uptake is with this one. The creator @siliconsjang says they want to make it fit in the $5/month tier at CloudFlare, which sounds pretty good. Also, cool to see that it uses #Fedify for federation.

https://github.com/SJang1/siliconbeest

Is there somewhere a good open source software in Python to act as bridge between RSS and ActivityPub act as actor? Before I write something new.

#activitypub #opensource #rss

Major updates were made to the delightful fediverse curated lists..

💎 delightful fediverse experience

- 52 new projects added
- 50 projects marked unmaintained
- 15 projects updated

New list categories:

- Professional networks
- Instant messaging
- Search engines
- Security and privacy

https://delightful.coding.social/delightful-fediverse-experience

💎 delightful fediverse development

- 18 new projects added
- 20 projects marked unmaintained
- 5 projects updated
- 7 projects removed
- Improved table of contents
- Listed SWICG / SocialCG task forces
- More improvements pending

New list categories:

- SWICG Task forces
- Data portability
- Developer hubs
- Data formats

https://delightful.coding.social/delightful-fediverse-development

💎 delightful fediverse clients

- 16 new projects added
- 33 projects marked unmaintained
- 5 projects updated
- 3 projects removed
- Separate section for unmaintained

https://delightful.coding.social/delightful-fediverse-clients

#ActivityPub #SocialWeb #fediverse

"artist-alley implements ArchivePub, an open federation protocol built on the ActivityPub data model with DAM-shaped extensions for asset sharing, workflow state, and brand workspaces."

"Content-addressed federation:
Every reference to asset bytes uses a content-addressed URI:
cas://<sha256>?content-type=image/png&size=12345"

https://artist-alley.org/docs/archivepub
#ActivityPub #fedidev #ArchivePub

There are nice things in this "timeline", so let's find opportunities to be grateful!

#snac2 #fediAdmin #mentalHealth

RE: https://techhub.social/@manlycoffee/116961593297443609

I may be sounding tongue-in-cheek, but I've been humouring the idea of "the email of social media" and/or "social media of email".

I'm trying to see just how viable such an interface will be.

Pretty much embrace the email-like nature of ActivityPub.

The folks who looooove acting competitive (you know, antagonism towards a competing ideas) love to scoff at ActivityPub (well, really, the Mastodon protocols overall).

I actually don't think they're wrong.

For this reason, I think ActivityPub is fine for what it is.

In fact, embrace it.

Treat it like email, with one added feature: the idea of "following".

#Fediverse #SocialMedia #ActivityPub #Mastodon #Email

@Edent

Because this was double-posted (microblog Note + blog Article) on my timeline, I will copy/paste here, that on the delightful fediverse experience curated list I have a separate category for #GeoSocialNetworking solutions ..

https://delightful.coding.social/delightful-fediverse-experience/#geosocial-networking

#ActivityPub #SocialWeb #GeoSocial

🆕 blog! “Scattered thoughts on social geolocation”

I want to be able to share my location with my friends on social media. Twitter (RIP) had a way to attach an optional location to a post. Facebook still lets me check in to venues. But neither ActivityPub (Mastodon) nor AT Protocol (BlueSky) allow me …

👀 Read more: https://shkspr.mobi/blog/2026/07/scattered-thoughts-on-social-geolocation/
⸻
#ActivityPub #BlueSky #fediverse #FourSquare #geolocation #json #openstandards #OpenStreetMap

Good morning Fedi friends,

I have been feeling a rising anxiety over the state of the open web and the fediverse - after seeing efforts by politicians all over the world (in Europe too!) to introduce age verification laws for social media.

My way of coping?

Teaching people how to self-host their own Fediverse profile (using the superb #GoToSocial) via #YunoHost.

Chapter 1 in this series is available here:

🔗 : https://blog.elenarossini.com/a-newbies-guide-to-self-hosting-gotosocial-part-1-installation-and-set-up/

#resist #blog #ActivityPub #selfhosting

@octade thanks!

There's also a list for client software and another one for #ActivityPub developers speccifically. I am currently in the process of significantly updating them :)

https://delightful.coding.social/delightful-fediverse-development

https://delightful.coding.social/delightful-fediverse-clients

@michael

For the #ActivityPub and #ForgeFed implementation the #Forgejo contrib organization on #Codeberg has a separate repository and a roadmap they keep up-to-date. See:

https://codeberg.org/forgejo-contrib/federation/src/branch/main/FederationRoadmap.md

I just now found a self-hosted fediverse server that allows connection and administration via SSH. So far its setup instructions are the simplest I've seen for any ActivityPub server software.

https://stegodon.social/

#Fediverse #ActivityPub #SSH #stegadon #social #SelfHosted #WebMaster #WebLord

#TIL about #Harmony, a bleeding-edge project to build a decentralised replacement for Miscord using ActivityPub, E2EE using Vodozemac, a cryptography library used in Matrix software;

https://joinharmony.app/

Source code is on GritHub, under AGPL;

https://github.com/zcharef/harmony

Anyone know anything about this? So far I haven't been able to find fediverse accounts for the project itself, or the creator.

#fediverse #ActivityPub #Vodozemac #Matrix

Check out https://rel.re #relre if you are looking for a strong #activitypub #relay , I'm constantly trying to improve it or find quirks of specific relaying implementations to support as many AP services as possible (that do relaying). tor onion relaying also possible. (oh now that i think about it, ill generate a tor onion link for relre)

#HolosSocial relay is confirmed to be very stable. I will officially tag it soon so admins can run their own relay with a script to easily install it on their VPS.
Using Holos with a custom domain and a cloud for media allows you to own your portable identity on the #Fediverse. Relays become only an infrastructure for it. Your device runs the #ActivityPub server and works as smoothly as any other app. Micro-blogging, media, and video, all from a single account. Switch with a simple tap.

In a few days, the last brick of the relay server will be published for an official release and a tag.
A lot of stress when you are alone, but after a few weeks the work has paid off, it is really stable.
Running your own #ActivityPub server on your phone will be as simple as using any other app. You will not be limited to a lookalike: micro-blogging, media, videos, all you want in a simple tap.

#HolosSocial

Conoscete questo progetto?

Holos - Your Device is Your Fediverse Server

Holos turns your phone or computer into a full ActivityPub server. No big-tech hosting, no middleman reading your posts. A relay keeps your identity online 24/7 while your device stays in your pocket.

#fediverso #fediverse #activitypub #holossocial

https://holos.social/

@cwebber @dweb yes! I am doing a workshop on programming with the #ActivityPubAPI, and another intro to #ActivityPub. I'm going to try to demo #tagspub too.

#DwebCamp

Mastodon Collections === Loops Starter Kits

https://joinloops.org/starter-kits

Search Loops Kits on Mastodon, and vice versa.

powered by #activityPub

When X, Meta and TikTok relaxed their rules on hate speech, racism and transphobia, they didn't undermine the open social web.

They proved why this needs to exist.

Safety and mental health come first here. They're the foundation everything else stands on.

Not optional. Not negotiable. The vulnerable come first, always.

I have a roadmap to improve this, and I'll soon be asking for your feedback to make these spaces safer for the people who need them most.

#safety #humanRights #activityPub

@brewsterkahle @internetarchiveeurope @dweb #DWebCamp #DWeb #ATProtocol #ActivityPub #Fediverse

@fossnorth a question..

Was your previous domain location conf.tube perhaps? If so, on conf.tube were the videos of the #ActivityPub 2020 conference, which I cannot find on the new #Peertube location.

Looking specifically for @darius talk https://socialhub.activitypub.rocks/t/lets-play-and-win-our-own-game/953

I submitted a Pull Request to update MacPorts' snac to 2.93 here:

https://github.com/macports/macports-ports/pull/33311

GitHub Continuous Integration checks passed OK!

It's up to someone else with commit access to merge it.

Thanks to violette, hanchan, inz, lainsoykaf, nullenvk, e0w0e, dragondaddy, daltux, zen and anyone else I may have missed for also contributing to the improvements in this release!

#snac #MacPorts #OpenSource #ActivityPub #Mastodon #NoDatabaseNeeded
#NoJavaScript #NoCookiesEither #NotMuchBullShit #snacAnnounces

CC: @grunfink@comam.es

build the future you wish to see.

I feel like a bee, pollinating for the next gen to be.

handing out blueprints so the whole swarm builds free.

🐝

#ActivityPub #ActivityPubSocial #soon

Alt...

ActivityPub.social preview, coming soon

FediCon 2026 website is now live, thanks to @reiver for organizing this!

https://fedicon.ca

#fedicon #activitypub #fediverse

Added a new admirations entry point to the web UI, containing a timeline of liked, boosted and reacted posts. Please take note that, after installing the new version, it will start empty, and be filled with subsequent reactions (contributed by violette).

It's now possible to disable showing posts in a given set of languages.

Nested quoted posts are limited up to 3 levels.

New configuration knob: by setting keep_replies_posts to true in server.json, remote posts that a local user has replied to are retained in the public timeline, preventing them from being purged (contributed by hanchan).

New configuration knob: by setting keep_replied_me to true in server.json, remote replies to local posts are retained in the public timeline, preventing them from being purged (contributed by hanchan).

Ensure actors' public key PEM never includes anything after the end marker.

Fixed some memory leaks (contributed by inz).

Several additional keyId checks (many thanks to lainsoykaf for bringing this to my attention).

Fixed crash in the JSON parser (many thanks to nullenvk for bringing this to my attention).

Mastodon API: fixed lost custom emojis after edition (contributed by e0w0e).

Updated French, Brazilian Portuguese, German, Spanish translations (contributed by dragondaddy, daltux, zen).

https://comam.es/what-is-snac

If you find #snac useful, please consider buying grunfink a coffee or contributing via LiberaPay.

#snacAnnounces #FrugalFediverse

3/3 Participants will take part in talks, workshops, and hands-on collaboration exploring what a more resilient, open, and decentralised web could look like in practice.

DWeb Camp is a space for building, not just talking about, the web we want.

@brewsterkahle @internetarchiveeurope @dweb #DWebCamp #DWeb #ATProtocol #ActivityPub #Fediverse

Alt...

A large group of DWeb Camp attendees seated in a circle on a patterned rug inside a white open-sided tent, engaged in a structured group discussion, with a flipchart easel and sunny outdoor landscape visible behind them.

Alt...

DWeb Camp attendees relaxing and conversing in inflatable lounge chairs among tall redwood trees, with teal paper lanterns strung overhead and a hammock visible in the background.

Summer is here, and sadly it is peak season for pet abandonment.
#PawFed is a federated map for animal welfare built on #ActivityPub and #OSM.

It already shows shelters and vets near you. Found an abandoned animal or need help? Mention @PawFed from any #Fediverse account: a pin lands on the map, and your call is relayed across the #Fediverse, whatever your instance.

More: https://pawfed.org/how-it-works

The #HolosSocial relay is now stable enough to be tagged and published in production.

If you're interested, there is an interactive installation script and full documentation to do all the steps yourself with Docker on the #Codeberg project.

Running a relay is not like running an instance. They provide infrastructure. People with custom domains and Cloud for their media don't depend on a relay to keep their account. That's the whole purpose of this project, owning an #ActivityPub identity.

#Lazyweb When I want to spin up my own #Fediverse instance that supports #Markdown when composing a post and that can handle my significant amount of followers with a seamless migration from my current #Mastodon instance, which #ActivityPub Implementation would you use? Ideally it should be a simple rootless container setup that JustWorks™ with podman. Perfection would be a single, self-contained container without the need to spin up several ones for databases or other stuff.

In the #Fediverse, most software is built around a specific platform model. One for microblogging, one for video, one for photos... and new ones will keep coming.
With #Holos, your phone runs your own #ActivityPub server. You control your data and can use your own domain as your identity.
Built on the protocol, not a platform model, Holos is not limited to a single use case. One account that adapts to your needs.
That's where we're heading, and we hope for your support.

#HolosSocial

@alineblankertz @malteengeler

Regarding the why: When coding Mastodon, Eugen used those parts of the #ActivityPub and #ActivityStreams standards he found useful. For functionality that was not (yet) covered by those standards, he came up with his own solutions and made them part of the Mastodon API which can be considered a quasi-standard now.

When Mastodon was a one person shop, this was a pragmatic way to make progress fast. Standardization bodies are famous for moving slowly, and maybe Eugen was also put off by some of the more eccentric personalities in the ActivityPub community. Now that Mastodon (the organisation) has grown, they should assume a more active role in standards bodies. Perhaps they have – I have not followed these processes closely in recent years.

At any rate, I think it is fair to say that the Mastodon makers and the Fediverse standards community have had a difficult relationship. This is my impression from visiting FediCamp and FediDay events (where Mastodon makers were absent), and some reading in the ActivityPub community forum, e.g.:
https://socialhub.activitypub.rocks/t/mastodon-monoculture-problem/3189/11
https://socialhub.activitypub.rocks/t/discussion-mastodon-and-the-fediverse/1967

How does Write Freely compare to Mastodon? Do you get any sort of user interaction? As a series of interconnected platforms, is it growing?

#askfedi #fediverse #writefreely #mastodon #activitypub

Following threads will be available in #HolosSocial 1.10.0. You can subscribe to a thread and get notified when new replies arrive, even from accounts you do not follow. It works with standard #ActivityPub activities by sending a Follow targeting a post, with a polling fallback for servers that do not support it yet.

How it works: https://tom79.dev/posts/follow-a-note/

RE: https://toot.fedilab.app/@apps/115572783993063223

This post is about 7 months old, and #HolosSocial went far beyond it since. It now has #E2EE DMs with the Signal protocol, and real identity portability. You can use a custom domain so your identity rests on your own name and keys, and keep your media on your own cloud. Leaving a relay is no longer a migration, you just point your domain elsewhere and keep going. This remains optional, you have time to discover the app and enable things later that will give you full independence on #ActivityPub.

0. The first line of moderation should not be the instance admin. Each user account should be able to moderate mentions of their ID, or replies to their comments.

1. The top poster of a comment thread should be able to moderate all reply comments under that thread.

2. Instance admins should only delete posts that are clearly designed to offend, hurt, or viciously attack, bully, harass, gaslight, annoy etc. but should never delete a post simply on ideological grounds or heated but honest disagreement or debate. Telling the difference is very simple in almost all cases: tone and mindless repetition being the biggest giveaways of the respondent's intent. If it becomes an unwanted or unproductive argument the top poster should be able to quash replies.

3. Users should be able to click a button to block and entire thread regardless of who posts to it.

These things are not a major problem for me since I'm on a simple instance and I can add users to my personal blacklist via CLI. It would be nice to see this kind of stuff as standard, basic button functions in activitypub and fediverse since not everyone wants to run an instance and use CLI scripts to moderate.

#mastodon #fediverse #moderation #postDeletion #activitypub #social

#Mastodon #UX #GUI #Productivity #Interfaces

Is there facility to run the phone app via TOR network, to hide user IP from the relay?

#Holos #Tor #Fediverse #Privacy #Anonymity #ActivityPub

Quoted posts are now shown.

Added metadata to remote users in the people page (contributed by dandelions).

Fixed memory leak (contributed by dandelions).

Fixed user matching (contributed by rakoo).

Rendering visibility conditionally, with lesser reach if needed (contributed by byte).

Added a button next to a follow notification to follow back.

Fixed typo in man page (contributed by spky).

Updated Czech and German translations (contributed by pmjv and zen).

https://comam.es/what-is-snac

If you find #snac useful, please consider buying grunfink a coffee or contributing via LiberaPay.

#snacAnnounces #FrugalFediverse

Why on earth was the #ActivityPub protocol even let out the door without a well-specified and mandatory graceful, non-destructive key rotation scheme?

Yes I know the privacy issues. Those are not valid reasons to not have such a mechanism; it's a valid reason to not enable or use one.

What we're stuck with now is a ton of instances with absurdly long, legacy-algorithm keys (RSA-4096) with no way to replace them with shorter/better keys without effectively losing everything ever posted on the instance.

The protocol is only 7 years old! EC crypto was well-established at the time, and should have been the default.

And what happens once everyone has to replace the keys, because RSA is broken by quantum computers (I know, probably 100 years to go)? The #Fediverse will be a wasteland, with no instances trusting anything from any other instance, so all #Federation breaks down.

Sorry if I got some details wrong about what the protocol says. If I get flamed to death for being wrong, then I'll consider that a Good Thing(TM). I've been trying to find a way to rotate/replace keys for a while and all my searching turns up is either 1) confirmation that most people don't know or care about cryptography, or 2) https://socialhub.activitypub.rocks/t/key-rotation-notification/562 - which really isn't helpful.

If it is possible to gracefully rotate the key(s) of an instance/user, there really has to exist some documentation that explains clearly how to implement this in a server and how to exercise it as a server operator.

#Cryptography #Rant #Mastodon