search

swicg / activitypub-e2ee

Coordination of work on end-to-end encryption with ActivityPub
12 stars 0 forks source link

Verifiably end-to-end encrypted #14

Open evanp opened 2 months ago

evanp commented 2 months ago

"As an ActivityPub user, I can confirm that the conversation I’m in is truly end-to-end encrypted and that no intermediate man-in-the-middle has access to the contents, so I and my correspondent can use untrusted servers."

evanp commented 2 months ago

There aren't a lot of great ways to do this. The best options I know of are:

  1. Out-of-band confirmation of public key IDs, maybe using a human-readable fingerprint.
  2. A web of trust, with signed keys.