best issue so far: https://github.com/tootsuite/mastodon/issues/1002

cc @Mastodon

Mastodon's federation introduces UX challenges.

One that worries me a lot is about message forgery. Anyone can forge a twoot, even cross-server.

Whereas Twitter Inc might be trustworthy enough to not forge transcripts. Anyone can run a Mastodon server and might want to abuse it to influence people (see Russian troll campaigns).

Should Mastodon "home servers" cryptographically sign updates? Should there be end-to-end signatures? Anyone has thoughts on this?

So, we are currently invading mastodon.social on two fronts - French social media, and the migration of #infosec from twitter :P

We should probably make @Gargron 's life easier and help the guy out; https://www.patreon.com/user?u=619786

Please boost! (it's the new RT, right?)