Email or username:

Password:

Forgot your password?
Top-level
Andy Piper

@liaizon @hongminhee @thisismissem I think it may be something long-standing here, is there an existing GitHub issue where I can get more background? I know it’s pretty complicated at this point though.

6 comments
Andy Piper

@liaizon @hongminhee @thisismissem (also asking as I’m on my phone walking right now and can’t search so easily!)

Emelia 👸🏻

@andypiper @liaizon @hongminhee the version of JSON-LD Signatures that mastodon supports is old, basically they implemented it, then the spec completely changed.

That's why stuff doesn't look right.

The question is then: how do you migrate forwards without breaking compatibility with existing deployments. That's gonna need time & money thrown at the problem to solve.

Andy Piper

@thisismissem @liaizon @hongminhee agreed that it will take a while to resolve things due to the scale of the deployments.

silverpill

@thisismissem @liaizon @andypiper @hongminhee

FEP-8b32 is designed to be compatible with existing implementations. The upgrade path for Mastodon may look like this:

1. Support multiple public keys per actor
2. Start publishing second Ed25519 key as described in FEP-521a
3. Start adding FEP-8b32 integrity proofs in addition to LD signatures (as specified in "Backward compatibility" section of FEP-8b32)
4. Stop adding LD signatures

Andy Piper

@liaizon @hongminhee @thisismissem no promises on how quickly this can be resolved, but it is in progress. It needs more work and probably backporting etc. github.com/mastodon/mastodon/p

Go Up