Email or username:

Password:

Forgot your password?
Top-level
dansup

@pixelfed I’m not saying I will go ahead with this, I want your feedback before any decision is made!

I want to get this right, there is no rush, so please let me know your thoughts on this!

5 comments
Jarjan (He/Him)

@dansup
Other than it being open/auditable, I'd like it to be opt-in only and off by default. That would give people the option to use it, but wouldn't force it on anyone. I understand that would limit it's use, but it's find that preferable over the potential privacy implications.
@pixelfed

Raphael Lullis

@dansup you can do this is in a privacy-preserving way, no?

- Instead of asking the user to upload their contacts, get the user own email/phone/pixelfed account handle.

- Upload a hash of the private contact information, paired with clean text pixelfed account info.

- Other people now are able to find each other by simply asking your service "do you know anyone with this hash?", and in case your service answers yes, then your app can say "yes, you should talk with so-and-so@pixelfed.

Raphael Lullis

@dansup almost. What I am saying is that you don't even need to upload the contact list. You can do the matching in the device.

dansup

@raphael It would be client side matching yes, I worded this badly 😅

Go Up