Post by @ViP@mastodon.social

RE: https://mastodon.social/@_elena/116929510685583647

Installed #yunohost yesterday on my Proxmox home server to fiddle around and was about to deploy #GoToSocial. But this "Danger" Box in the docs, saying the domain will be taken forever by this instance of GTS scares me. Or is this the case for every #ActivityPub Server anyway?

I thought, only the full handle like "@user@social.domain.net" can be problematic when being refused because of caching and generated keys. Any experience with that? https://docs.gotosocial.org/en/v0.22.0/getting_started/

#selfhosting

Deployment considerations - GoToSocial Documentation

None

2 days ago

#yunohost #selfhosting #activitypub #gotosocial

4 Replies

0 Boosts

silverpill

@silverpill@mitra.social 2 hours ago

@ViP This probably only affects other GoToSocial instances https://codeberg.org/superseriousbusiness/gotosocial/issues/3197

Other fedi software don't tie keys to domains forever.

Codeberg.org

[feature] Update old keys if checking signature fails

### Is your feature request related to a problem ? Imagine someone leaks on accident the users private keys. The only solution is to rotate them of course. The problem is that there is no way to rotate keys without the old keys (wich, by the way, are already compromised). I am getting 401s in a...

silverpill

@silverpill@mitra.social 2 hours ago

@ViP This probably only affects other GoToSocial instances https://codeberg.org/superseriousbusiness/gotosocial/issues/3197

Other fedi software don't tie keys to domains forever.

Codeberg.org

[feature] Update old keys if checking signature fails

Elena Rossini 🌈

@_elena@mastodon.social 4 hours ago

@ViP I was just writing about it for my blog post. It's definitely an important consideration. Maybe @dumpsterqueer can provide some context?

Viktor Pankraz

@ViP@mastodon.social 4 hours ago

@_elena @dumpsterqueer Thanks Elena! Definitely looking forward to reading your article with all your insights! Still curious what others have to say.