@lain probably doesn't do much to help your campaign of arguing against "pleroma is run by nazis" though

@lain well it sure is the part that makes the screenshot "complicated"!

@lain Hm, https://en.wikipedia.org/wiki/Coco_Chanel#Activity_as_Nazi_agent sure makes that complicated

@lain Here is why I ask https://github.com/cwebber/rwot9-prague/blob/secure-uis/draft-documents/secure-user-interfaces.md#composing-a-public-message (heavily WIP)

I assume you're fine with that?

blip

@lain What is the meaning behind your current avatar and display name, out of curiosity?

@sl007 @cjd What about uploading them as-is to archive.org and asking for help getting them moved onto peertube?

@emacsen here is a series of plus signs representing empathy packets +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

@cjd @tedu Admittedly I probably need to learn more about BGP

@cjd @tedu Or are you saying pull rather than push?

@cjd @tedu And how do you know you're pulling messages from Alice vs Bob? ;)

@cjd @tedu Ie, "I know that I handed this ocap to Bob specifically, so if a message comes in from here, I believe it's from Bob."

No signature required in that case.

@cjd @tedu It's possible to do message sending in a safe and intentional way *without* signatures but that probably requires ocaps.

@gcupc @bob @zig @sheogorath I will never run any code that is under the Parity Public License or even touch anything running it with a ten foot pole.

@gcupc @bob @zig @sheogorath If you've paid attention to the predatory FUD fearmongering to pressure proprietary relicensing that has happened with the AGPL (as opposed to community-centric enforcement) this should raise the hairs on the back of your neck.

@gcupc @bob @zig @sheogorath If you've paid attention to the predatory FUD fearmongering to pressure proprietary relicensing that has happened with the AGPL (as opposed to community-centric moderation) this should raise the hairs on the back of your neck.

@gcupc @bob @zig @sheogorath The Parity Public License goes further than that and could be used to threaten extracting private information unless you pony up and get the data under a different license.

The scope of the Parity Public License is *so* broad that it covers anything you run on the same machine... actually more than that, even other machines that connect to the machine in some cases.

@tedu @cjd And the reason Pleroma hasn't implemented it, I get it, is because it's hard to implement linked data signatures if someone hasn't already handed you a complete json-ld library. Full ack on that one.

@tedu @cjd That's not a defined-in-AP behavior. I'd argue the reason that's happening is because we haven't gotten convergence on the ability to sign submitted posts themselves and Pleroma doesn't "trust" the content unless it can retrieve it in general IIUC. This wouldn't need to happen if we had authenticated messages.

Datashards can help too, but this also illustrates why we'll want to add authentication to messages for Datashards to take off too (checking the "origin" won't be enough).