@andypiper @liaizon @hongminhee the version of JSON-LD...

洪民憙 (Hong Minhee)'s posts Post Back to profile

@andypiper @liaizon @hongminhee the version of JSON-LD Signatures that mastodon supports is old, basically they implemented it, then the spec completely changed.

That's why stuff doesn't look right.

The question is then: how do you migrate forwards without breaking compatibility with existing deployments. That's gonna need time & money thrown at the problem to solve.

Like 11 September at 18:28 | Wall-to-wall | Open on hachyderm.io

3 comments

Emelia 👸🏻

@andypiper @liaizon @hongminhee

See here: https://docs.joinmastodon.org/spec/security/#ld

11 September at 18:33 | Open on hachyderm.io

Andy Piper

@thisismissem @liaizon @hongminhee agreed that it will take a while to resolve things due to the scale of the deployments.

11 September at 18:52 | Open on macaw.social

silverpill

@thisismissem @liaizon @andypiper @hongminhee

FEP-8b32 is designed to be compatible with existing implementations. The upgrade path for Mastodon may look like this:

1. Support multiple public keys per actor
2. Start publishing second Ed25519 key as described in FEP-521a
3. Start adding FEP-8b32 integrity proofs in addition to LD signatures (as specified in "Backward compatibility" section of FEP-8b32)
4. Stop adding LD signatures

11 September at 20:55 | Open on mitra.social

Go Up