Content warning: The prospect of making the Fediverse more secure is an ongoing topic, with a number of developers, privacy advocates, and user communities weighing in on how to do it. On Tuesday evening, ActivityPub spec co-author Evan Prodromou announced that he and Tom Reveal/hide

The prospect of making the Fediverse more secure is an ongoing topic, with a number of developers, privacy advocates, and user communities weighing in on how to do it. On Tuesday evening, ActivityPub spec co-author Evan Prodromou announced that he and Tom Coates have received a grant to develop end-to-end encryption (E2EE) for the protocol.

Very happy to announce that @tomcoates and I have been given a #SummerOfProtocols grant to develop an end-to-end encryption (E2EE) protocol for #ActivityPub DMs, including a reference implementation and a report to submit to the W3C SocialCG.

https://forum.summerofprotocols.com/t/sop-2024-pig-and-pog-grantees/1270

— Evan Prodromou (@evan) 2024-05-01T02:17:09.357Z

In his proposal, Evan calls out that while ActivityPub is encrypted in transit, there is no standard way of keeping it encrypted at rest. While this isn’t a problem for public-facing posts, this is a non-starter for a lot of users when it comes to DMs and will certainly be a welcome addition. Any social web platform could implement E2EE for themselves, but a standardized format will enable users of different Fediverse services to DM each other through the lens of the social platform of their choice.

Independent Efforts

That’s not to say that others haven’t already been trying. Daniel Supernault, creator of Pixelfed, has been working on his own ActivityPub-based DM solution named ‘Sup’. It would be a bring-your-own account service with a promise of being E2EE via the Messaging Layer Security Protocol.

sup. is an open source encrypted fediverse instant messenger, similar to whatsapp, made by pixelfed.

The beta will be launching later this month, and btw most fediverse accounts will work, not just Pixelfed 😉

— dansup (@dansup) 2023-08-05T11:38:40.670Z

At this point, E2EE DMs in the Social Web aren’t a question of “if” , but “when”. This is still early stages of this proposal, Sup is still in development, and there’s more research to be done – but, the ability for Fediverse platforms to support encrypted private messages holds immense promise for making the network more secure.

Sup is a New Messaging App by the Creator of Pixelfed

Daniel Supernault, creator of Pixelfed, announced recently that he's working on a new messaging app called Sup. Details are sparse for the moment, as it's a new initiative under Pixelfed's umbrella. S

^{Sean Tilley (We Distribute)}

WATCH Brandon and Josh from All Things Secured chat email security, encryption, privacy, and the best ways to protect yourself online 🔒 😎

What are your thoughts on their discussion? 💭 💭

Watch here 👉https://invidious.flokinet.to/watch?v=LN_9jMoevtE

#email #emailprivacy #encryption

Here we go again (and again and again ...) : « #Europol wants to bypass WhatsApp and Signal #encryption »

« In a joint appeal made public on Sunday, European police forces are calling on governments to allow message encryption on communication platforms to be circumvented. »

› https://www.lemonde.fr/en/pixels/article/2024/04/22/europol-wants-to-bypass-whatsapp-and-signal-encryption_6669181_13.html

Europol wants to bypass WhatsApp and Signal encryption

^{Le Monde}

“Australia’s spies and cops want ‘accountable encryption’ - aka access to #backdoors”

“he outlined an argument that a dynamic tension exists between security and technology, Burgess added “encryption protects our #privacy and enables our #economy…and creates safe spaces for violent #extremists to operate, #network and #recruit.” #Burgess labelled encryption “clearly a good thing, a positive for our democracy and our economy” because it “protects #privacy, it enables communications and transactions.” But he noted it also provides #criminals with #anonymity, which is why #Australia has laws that make it possible to access encrypted messages.”

#ASIO / #encryption <https://www.theregister.com/2024/04/25/asio_afp_accountable_encryption/>

Australia’s spies and cops want ‘accountable encryption’ - aka access to backdoors

And warn that AI is already being used by extremists to plot attacks

^{Simon Sharwood (The Register)}

🚨 I2P Is Under DDoS Attack By Zombie Routers

#I2P #networking #infosec #cybersecurity #HumanRights #Journalism #activism #surveillance #Privacy #Sybil #ddos #dos #video #proxy #encryption #crypto #e2ee

Watch In I2P

http://invidious.qwik.i2p/watch?v=XfVdxbtTZ5A

#Peertube

https://tube.tchncs.de/w/fMpkjUnNcaKqPchXUPkgV9

🚨 I2P Under Attack By Zombies! 😮

I2P Network Is Currently Under Heavy DDoS Attack (Distributed Denial Of Service) By Spoofed Routers, Spawning By The Thousands - Some Locations Spinning Up 100+ Routers In A Single Hour. Networks L...

^tchncs

"Citizen, leave a copy of your home keys at the police station."

Hmm, people won't like that.

How about, "home-builders have a social responsibility ...[and must give police copies of all house keys]"

Much better.

#Europol taking another stab at the encryption fight.

#Encryption #privacy #infosec #cybersecurity #europe #surveillance

With the US Senate agreeing to reauthorize #FISA there has been no better time to start using end-to-end #encryption. 🔒

We don't need more #surveillance. 🕵️

Please contact your representatives and say NO to warrantless surveillance!

👉 https://act.eff.org/action/tell-the-u-s-senate-stop-risaa-the-fisa-mass-surveillance-expansion

Tell the U.S. Senate: STOP RISAA, the FISA Mass Surveillance Expansion

We all deserve privacy in our communications. Part of that is imposing limits upon the government’s ability to collect and access them.

^act.eff.org

Check out our newest Short on #Invidious! 🎉

How to create a FREE encrypted email account in seconds.

Keeping spies out of your mailbox has never been easier. 😉

➡️ https://yt.artemislena.eu/watch?v=cbuaToWuBBw

#encryption #email #free #privacy

How to create a FREE encrypted email account (with Tuta!) | #encryption #email #free #privacy

Using end-to-end encryption doesn't need to be difficult. By choosing a secure encrypted email provider like Tuta, you can get away from the over complicated way that Big Tech handles security.

^{Tuta | Invidious}

Elections #Elections2024
*#ElectionInterference*

(7/7)

...am, as yet, undecided regarding the potential threat of a surveillance state, as in #China, #NorthKorea, or #Russia, but things cannot continue as they are. The really stolen (from #HillaryClinton) #Election2016 in the #US should be a definite call for action.
However, ending end-to-end #encryption (#E2E) is certainly taking it way too far. There must be a society left worth fighting for.

tbc

//