• 25 Posts
  • 219 Comments
Joined 1 year ago
cake
Cake day: April 27th, 2023

help-circle

  • it wouldn’t make sense for the server to hold your private key, since that would mean the owner of your instance could make posts as you.

    I mean, this is quite normal and common for all traditional social media (or any site really) you sign up for. It’s what most ActivityPub instances do too, though there’s nothing in ActivityPub that requires the server to hold the private key. It could in principle be held by the client but I don’t believe there is any implementation that does that currently.

















  • You’re misunderstanding me again. Please try reading what I said again.

    I’m not suggesting allowlist federation, though that is another tactic that could be used. I’m just saying that a spammer on the fediverse would be quickly defederated and would have to buy a new domain to keep spamming, which would probably be too expensive to justify.