Reminder (or maybe eye-opener) to Mastodon users:

Direct Messages on Mastodon are NOT encrypted.

What does this mean: The message is in the database un-encrypted. Anyone with access to the database could potentially read the messages.

For mastodon.world, only the admins have database access (@jeroen, @spaceriker and myself).

If you have really sensitive info, don't share it on Mastodon. There are secure messaging apps for that.

@ruud @jeroen @spaceriker I'd like to add that Direct Messages aren't anything but a post (aka toot) with visibility set to onlyMention.