Conversation

Notices

1. Christine Lemmer-Webber (cwebber@octodon.social)'s status on Monday, 18-Feb-2019 18:54:21 UTC Christine Lemmer-Webber

   • Aral Balkan
   • bhaugen

   @aral @bhaugen I am working on that.

   It's a common meme though, and it's not just you. I agree that email is not good enough. The thing that annoys me is that there's a lot of imprecision and it sounds like AP is even *less* directed than email (one exception I will agree with is sharedInbox being a problem, but in a sense delivering to specific inbox endpoints is even more direct than email)

   • infinite love ⴳ (trwnh@mastodon.social)'s status on Monday, 18-Feb-2019 19:08:23 UTC infinite love ⴳ

     in reply to

     • Aral Balkan
     • bhaugen

     @aral still, both email and ap's "privacy guarantee" is the same: your messages will be private to the servers that receive them. that doesn't preclude the "rogue admin" threat model, but it doesn't make either "public" per se.

     even if your measuring stick for privacy is e2ee, you're basically making the mistake of equivocating existing implementations with the spec itself. pgp exists for email, but hasn't been done yet for ap. it's like saying xmpp is public despite omemo

     @cwebber @bhaugen

     Christine Lemmer-Webber repeated this.