I think the shift by the general public to Mastodon may be historically significant beyond just social media because it's a shift away from centralization and back towards distributed services. I'm hoping this trend continues in general for Internet services.
@climagic I hope it will happen for e-mail hosting, too. And for centralised services like AWS, Google Cloud, Azure and SPOF like Cloudflare, etc. Let's go back to connected islands!
@climagic @stefano Er, email is quite decentralized. Kind of the point of SMTP
@mjgardner @climagic I know. But there are a lot of problems managing emails as the “big ones” are the ones who play the game. Quite a challenge in the last years. Many of my historical mail servers are working fine, but as soon as you start with a new one you must be prepared to be spam marked by the big ones like Microsoft and (but less) Google and for a long time, even it you set everything following their standards
@stefano @climagic It’s only a matter of time before similar #spam mitigation techniques will need to be bolted onto #ActivityPub as spammers, scammers, and malware developers discover the #fediverse. If I’m reading things right, the spec just punts things to HTTP Signatures and Linked Data Signatures with #Mastodon adding some unique properties and behavior. I’m skeptical about that remaining sufficient.
@stefano @climagic …and I’ve already seen reports over the last day of a #spam flood / #DDoS attack. The “just set up #fail2ban“ advice isn’t being heeded or isn’t working
@mjgardner @climagic I see a lot of toots about it. More users -> more attention -> more nasty people trying to do nasty things
@stefano @climagic Yep, I have also seen peanut-gallery comments from #InfoSec and #NetworkOperations people saying this was entirely predictable with well-known mitigations, but #Mastodon admins and developers seem to be trying to reinvent them from first principles