RuudNov 9, 2022

Reminder (or maybe eye-opener) to Mastodon users:

Direct Messages on Mastodon are NOT encrypted.

What does this mean: The message is in the database un-encrypted. Anyone with access to the database could potentially read the messages.

For mastodon.world, only the admins have database access (@jeroen, @spaceriker and myself).

If you have really sensitive info, don't share it on Mastodon. There are secure messaging apps for that.

Joop #AlleBurgers #zerocovidNov 11, 2022
Show threadSanne Hoekstra

@ruud @jeroen @spaceriker

Don’t use Mastodon for private information, it’s a community sharing platform.
- Toots are stored unencrypted incl. DM’s.
- Toots are stored on a server you do not control (same as twitter)
- Toots are synced to all servers where your messages and boosts of your messages are followed.
- DM Toots are stored on your community server and on the server of your addressee.
- DM Toots can be shared (by accident) by the addressee.

Nov 10, 2022 at 12:37amWeb
Show threadErik JonkerNov 10, 2022
@smhoekstra @ruud @jeroen @spaceriker good to repeat, use #Signal for anything you want to keep private would be my suggestion, also opensource and not-for-profit.
Show threadRuudNov 10, 2022
@ErikJonker @smhoekstra @jeroen @spaceriker or Matrix 🙂
Show threadtyilNov 10, 2022
@ruud @ErikJonker @smhoekstra @jeroen @spaceriker Or #XMPP!