Email or username:

Password:

Forgot your password?
183 posts total
silverpill

Important information for FEP-8b32 and FEP-c390 implementers:
https://github.com/w3c/vc-data-integrity/issues/231

It was reported that context injection is a necessary step for eddsa-jcs-2022 cryptosuite. It is necessary even if secured object is nested inside an object with @context property (as in FEP-c390).

This means FEP-c390 feature file is wrong, because I assumed that context injection is not needed. What's worse, it is not even clear how context injection must be done in this case (should we inject a string, or an array?).

In cases where top-level object is being signed, the context injection is not needed, so existing FEP-8b32 implementations are probably correct.

Important information for FEP-8b32 and FEP-c390 implementers:
https://github.com/w3c/vc-data-integrity/issues/231

It was reported that context injection is a necessary step for eddsa-jcs-2022 cryptosuite. It is necessary even if secured object is nested inside an object with @context property (as in FEP-c390).

silverpill

More Instant Messaging Interoperability (MIMI)

https://datatracker.ietf.org/doc/draft-barnes-mimi-arch/

The architecture document describes a federated system (with clients and servers), so it is a good starting point for designing E2EE in Fediverse. The architecture also seems to be compatible with FEP-e61.

MIMI specifies its own message format, which we probably don't need because we already have one. However, it might be a good idea to copy some parts

silverpill

FEP-e232: Object Links has been finalized

Thanks to everyone who contributed!

#fep

silverpill

Portable AP objects

https://codeberg.org/silverpill/feps/src/branch/main/ef61/fep-ef61.md

Still WIP, but I'm starting to like it.
Removed WebFinger requirement that was present in earlier drafts to avoid making unnecessary HTTP requests.

silverpill

With did:apkey IDs objects can be replicated to multiple servers.
But other useful kinds of DIDs can be invented. I think this approach is futureproof, and should be compatible with any emerging p2p tech.

silverpill

Lately I've been working on a little side project: https://codeberg.org/silverpill/activity-connect

ActivityConnect a simple AP-to-AP bridge, similar to activitypub-proxy. It's not quite ready for production yet, and only works in read-only mode.

The primary goal of this project is connecting Tor and I2P instances with clearnet instances, and it will be also useful for circumventing instance blocks.
Connecting DID-based actors with domain-based actors is in scope too, but I don't know yet if that will be necessary.

silverpill

I think FEP-ae97 with server-independent IDs is the best way to make identities and data portable in #ActivityPub world.

FEP-c390 + Move activity makes identity portable but not data, and requires wide adoption to provide meaningful benefits. So far there haven't been much interest from developers.

FEP-ae97 with server-independent IDs makes data portable as well, and while it is not compatible with existing software, the server can support both AP flavors at the same time, so it is not worse than FEP-c390 + Move. I also found a way to make it work with Mastodon API, that makes it a clear winner.

There is still a couple of things that need to be figured out, of course:

- What is the best way to specify a list of hosts where data is stored? I'm not entirely satisfied with ?hosts=server1.example,server2.example solution.
- How to encrypt data? It's harder to maintain confidentiality of private messages when they are stored on multiple servers, therefore they should be encrypted.

I think FEP-ae97 with server-independent IDs is the best way to make identities and data portable in #ActivityPub world.

FEP-c390 + Move activity makes identity portable but not data, and requires wide adoption to provide meaningful benefits. So far there haven't been much interest from developers.

FEP-ae97 with server-independent IDs makes data portable as well, and while it is not compatible with existing software, the server can support both AP flavors at the same time, so it is not worse than...

silverpill

#Mitra v2.4.0

https://codeberg.org/silverpill/mitra/releases/tag/v2.4.0
https://codeberg.org/silverpill/mitra-web/releases/tag/v2.4.0

Allowlist federation. This might be useful for Tor and I2P instances where domain blocks are not effective against spam.

silverpill

This release mostly includes internal changes and refactoring. I'm moving low-level federation code to a separate crate, which I will use to build a bridge (more on that later).

silverpill

Husky v1.5.0 should fix some problems that were discovered during testing with Mitra instances. It's a nice app, and if you're looking for an Android client compatible with Mitra, give it a try.

Available on F-Droid.

silverpill

#Mitra v2.3.0

https://codeberg.org/silverpill/mitra/releases/tag/v2.3.0
https://codeberg.org/silverpill/mitra-web/releases/tag/v2.3.0

Highlights:

- Implemented replies collection. This means replies to Mitra posts can be fetched using mitractl fetch-replies command. Eventually this feature (loading missing replies) will be available in the GUI too.
- Profile images can be removed.
- Donation buttons for Lightning Network addresses (Mitra is looking for profile fields with labels "lightning address" and "lud16", just like PeerTube Lightning plugin).
- (Experimental) Support for recurrent payments via Monero Subscriptions Wallet. I haven't tried the app yet, just added automatic generation of their payment request codes for every invoice.

#Mitra v2.3.0

https://codeberg.org/silverpill/mitra/releases/tag/v2.3.0
https://codeberg.org/silverpill/mitra-web/releases/tag/v2.3.0

Highlights:

- Implemented replies collection. This means replies to Mitra posts can be fetched using mitractl fetch-replies command. Eventually this feature (loading missing replies) will be available in the GUI too.
- Profile images can be removed.
- Donation buttons for Lightning Network addresses (Mitra is looking for profile fields with labels "lightning address"...

silverpill

Also in 2.3.0:
Session length is now configurable
The default token expiration time is 7 days. Short expiration time is considered a good security practice, but might be annoying for users.

silverpill

I verified that Pleroma v2.6.0 handles FEP-e232 links correctly and enabled FEP-e232 on my instance.

This means people who use older versions of Pleroma won't see my posts with quotes. I rarely use quotes, but if you're on a Pleroma server, consider updating or applying the patch.

Other Mitra instances have FEP-e232 turned off (by default), and I'm not planning to toggle the switch anytime soon.

silverpill

https://pleroma.social/announcements/2023/10/29/pleroma-release-2.6.0/

Finally!

This release includes fixes for bugs that prevented adoption of FEP-e232 and FEP-fffd

silverpill

https://nullchinchilla.me/2023/10/earendil-an-uncensorable-decentralized-network-3-3/

>an uncensorable decentralized network

The post contains many good ideas, but:

- Yet another competitor to Tor and I2P
- Tries to do everything at once instead of solving specific problems with simple tools
- Likely will be ruined by shitcoinery
- Developers use Discord and Twitter

Many such cases.

https://nullchinchilla.me/2023/10/earendil-an-uncensorable-decentralized-network-3-3/

>an uncensorable decentralized network

The post contains many good ideas, but:

- Yet another competitor to Tor and I2P
- Tries to do everything at once instead of solving specific problems with simple tools
- Likely will be ruined by shitcoinery
- Developers use Discord and Twitter

silverpill

So, a decentralized alternative to Bandcamp is needed?

In theory musicians can use Mitra to release music to paid subscribers. I can also implement a paywall mechanism that works on individual posts.

https://timetheft.social/users/jazz/statuses/111296776010291428

silverpill

Paywall for individual posts enables many new use cases. Basically it turns fediverse server into a marketplace.

But how it should work? The server may send an automated reply with an unlocked version of a post, as a direct message. This can also be a beginning of a private discussion between the post author and the person who made the payment.

silverpill

qBittorrent v4.6.0 includes #I2P support

...and it just works! All I had to do is launch i2pd service, enable "I2P (experimental)" in qBittorrent's preferences and download a torrent file from http://tracker2.postman.i2p

Go Up