Email or username:

Password:

Forgot your password?
Darius Kazemi

I think it is fine for someone to use Mastodon DMs to send any message that they would also feel comfortable sending over unencrypted email. For some people that is "basically nothing" and for others that is "basically everything".

I am making this post so that I can link it in future discussions here so I do not have to type it again.

If you are seeing this post because I linked you to it: greetings from the past! It is March 10, 2023 and the weather today in Portland, Oregon, USA is dreary.

12 comments
Darius Kazemi

of course I got the date wrong. thank you, post editing

Display Name

@darius oh, i thought i was just reading it in the past

[DATA EXPUNGED]
Darius Kazemi

@inquiline if past-me is any indication, he loves to mess with present-me

alexandra catalina

@darius idk i can see a pretty menacing patch of blue sky out my window

Les Orchard

@darius Hey, we had one (1) ray from the sun strike our solar panels today. That's great Portland weather :)

kit

@darius if you're seeing this post in response at a future date, either during or after the dreaded Chemical Wars, "wassup" from the year 2023

David Fleetwood - RG Admin

@darius While I get your point I think the concern would be that there are two main avenues of compromise: in transit and at the endpoints. I think the belief of most is that their email, likely gmail, outlook, exchange, etc is likely managed by a large organization that will keep it secured and up to date while a random mastodon stack has a higher risk of one side or the other falling behind on maintenance and thus exposing a private conversation.

Samir Al-Battran

@darius not exactly the same, Darius.
Your email server and the recipient's server are run by an admin that's usually governed by a confidentiality agreement and can lose their job if they viewed or shares a private email.
Besides the OG instances and the few company ones, most people have Mastodon accounts on servers run by hobbyists, no confidentiality, no SOPs

Darius Kazemi

@Samir You're right they are not the same in that respect.

I do not have very much trust for companies with liability protections in place -- I would rather trust a hobbyist. I realize that other people trust corporations with legal liability more, and that's reasonable of them too, though I certainly disagree with their conclusion about where to place trust.

Samir Al-Battran

@darius
I think it's "recourse" vs "trust"
if I know that a service provider is violating my privacy, I can take legal action!
On the other hand, if a hobbyist violated my privacy and use the excuse "this server has no privacy" as a defence, there is really nothing I can do.

Go Up