-

Thu, 23 Feb 2023 16:29:05 +0100

eibhear@social.gibiris.org

There's a serious opportunity for #Mastodon and other #ActivityPub systems to implement properly secure DMs by integrating #Matrix from @Matrix.org .

mastodon activitypub matrix

show all 14 comments

Thu, 23 Feb 2023 16:30:15 +0100

METADESTROYER !! (He/Him)

edendestroyer@masto.ai

@eibhear

#xmpp might be a better option for lightweight use, but i wouldnt mind seeing something like matrix spaces integrated with #mastodon

Thu, 23 Feb 2023 16:37:53 +0100

Hans van Zijst

hans@social.woefdram.nl

@Éibhear 🔭 My idea exactly.

Thu, 23 Feb 2023 17:00:01 +0100

Lars

koyax@troet.cafe

@eibhear @matrix Generally I agree. Though I'm always sectical how to keep a simple UX when Users need to take care of their keys.

Thu, 23 Feb 2023 17:36:27 +0100

MTRNord (they/them)

MTRNord@mastodon.nordgedanken.dev

@eibhear @matrix meanwhile there is a bridge as a gap filler: https://docs.kazar.ma/

Thu, 23 Feb 2023 18:17:27 +0100

x0r

x0r@mamot.fr

@eibhear @matrix True. In the meantime, I'll try adding my Matrix address on my profile and let's see if that will encourage people to use that channel instead of direct messages.

Thu, 23 Feb 2023 18:20:26 +0100

Raphael Lullis

raphael@mastodon.communick.com

@eibhear @matrix and while we don't have that, people could use a service that gives them an unified account for both #matrix and #mastodon instances, like https://communick.com. #shamelessplug

Fri, 24 Feb 2023 22:34:36 +0100

vagabond

Hamishcampbell@campaign.openworlds.info

@eibhear @matrix that would be hugely blotted server wise, and mastodon is #4opens project so encryption is not a core part and would make the white lie of security this was built on, hard to maintain.

It works because it's #openweb to start to move to #closedweb would make this likely not work anymore.

Fri, 24 Feb 2023 23:02:51 +0100 last edited: Sat, 25 Feb 2023 01:16:41 +0100

Éibhear 🔭

eibhear@social.gibiris.org

What's closed web about matrix? Would your concerns apply also to other activitypub systems like friendica or pleroma and the like?

Sat, 25 Feb 2023 00:15:48 +0100

Nathan Schneider

ntnsndr@social.coop

@eibhear @matrix That would be great. Already at #Socialcoop we use Matrix for operational discussions. It would be great to see the two services integrated more tightly.

At @medlab we also use Matrix and Mastodon together with integrated user management through @cloudron

Sat, 25 Feb 2023 15:27:53 +0100

vagabond

Hamishcampbell@campaign.openworlds.info

@eibhear @matrix matrix is a gold #4opens project but has 2 issues it's a defacto open "industrial" standard and it has semi opaque governance issues. Not big problems.

The issue is pushing #closedweb thinking into a #openweb project. Why do we need to add secure DM's to mastodon, exactly, and what would be added by this and what would be lost?

#4opens

Sat, 25 Feb 2023 16:06:55 +0100

vagabond

Hamishcampbell@campaign.openworlds.info

@eibhear @matrix

Let's look at an example, backups and security, currently on #mastodon and the whole #Fediverse the is an understanding that nothing is actually private (ok mastodon keeps telling white lies about this, i don't blame them) so we trust our admins not to spy, and we don't stress about the lossyness of it all.

Add the security of secret chat, and you add a whole another stress to running an instance. Why do we need to do this?

Sat, 25 Feb 2023 16:07:31 +0100

vagabond

Hamishcampbell@campaign.openworlds.info

@eibhear @matrix

Media is public by default, its media, use an encrypted chat app if you won't privacy.

Sat, 25 Feb 2023 16:40:27 +0100

The Matrix.org Foundation

matrix@mastodon.matrix.org

@Hamishcampbell @eibhear in what way is matrix.org/foundation and spec.matrix.org semi-opaque (or a de facto standard)? :/ (we’re also proposing Matrix to IETF, but even if we weren’t, the Matrix Foundation is very much a real standards entity - just as much as the XSF or even W3C)

Sat, 25 Feb 2023 17:45:53 +0100

vagabond

Hamishcampbell@campaign.openworlds.info

@matrix @eibhear

The issue is pushing #closedweb thinking into a #openweb project. Why do we need to add secure DM's to mastodon, exactly, and what would be added by this and what would be lost?