Conversation

Notices

1. Christine Lemmer-Webber (cwebber@octodon.social)'s status on Wednesday, 18-Sep-2019 15:51:00 UTC Christine Lemmer-Webber

   • Caleb James DeLisle

   @tedu @cjd That's not a defined-in-AP behavior. I'd argue the reason that's happening is because we haven't gotten convergence on the ability to sign submitted posts themselves and Pleroma doesn't "trust" the content unless it can retrieve it in general IIUC. This wouldn't need to happen if we had authenticated messages.

   Datashards can help too, but this also illustrates why we'll want to add authentication to messages for Datashards to take off too (checking the "origin" won't be enough).

   • Christine Lemmer-Webber (cwebber@octodon.social)'s status on Wednesday, 18-Sep-2019 15:52:02 UTC Christine Lemmer-Webber

     in reply to

     • Caleb James DeLisle

     @tedu @cjd And the reason Pleroma hasn't implemented it, I get it, is because it's hard to implement linked data signatures if someone hasn't already handed you a complete json-ld library. Full ack on that one.