It's called Inbox for a reason, I'm working on Encrypted Direct Messages that will interoperate with Pixelfed's upcoming E2EE DMs 馃槑
Discussion
Loading...
@dansup can you PLEEEEAAASE (!!) first fix the Pixelfed privacy vulnerability I was reporting over a month ago?
I only got one email that you are "looking into this" and that you are "working on a fix"
I haven't heard anything about this yet. but messages are still publicly available.
I can also report the issue officially on Pixelfeds Github, if you prefer it.
Thx
#pixelfed #bug #vulnerability #privacy #privacyvulnerability
@dansup E2EE:
"only the sender and intended recipient can read the messages. No one else can access the cryptographic keys needed to read or send messages." (Wikipedia)
Maybe you were instead pointing at encryption in transit & at rest, like Google Drive? If you really mean implementing E2EE DMs, that's so cool!