@LukaJacobowitz

345 Followers
309 Following
13 Posts
@benpate This is awesome!
@soatok Key management!
@patcharcana @soatok It's incompatible in the sense that you cannot recover anything that was encrypted with the keys that you have lost, but it is possible to regain your identity, by e.g. registering a new signature public key linked to your handle.

@djspiewak @dysfun @fanf42 @bodil

10-20x? That seems like a lot? What kind of tasks are you talking about here and how are you measuring that?

@arianvp You could just do all the annoying popover autoplay bullshit on mouse move or hover and then it's functionally the same though :(

@soatok @evan @benpate @bonfire

KeyPackages are already signed in MLS, I think this could be as simple as having the MLS signature public key in the Key Transparency log. The KeyPackages can still be available as part of the ActivityPub actor, as long as we can verify the signature of the KeyPackage there is no way any intervening entity could insert their own KeyPackage into the collection.

@soatok Not too worry, I've been reading your blogs :D
@soatok Ah, so the main difference is the GDPR compliance by never storing the personal data in plaintext. That makes perfect sense, thank you!
@soatok Hey! I'm curious how your efforts for bringing key transparency to the Fediverse compare to efforts like Trillian (https://transparency.dev/application/strengthen-discovery-of-encryption-keys/) or AKD (https://github.com/facebook/akd)
Is there something they're doing or not doing that had you decide to start more or less from scratch? Thanks for all your work!
Use Trillian's Map Mode to strengthen discovery of encryption keys | Trillian

Key Transparency is a design for a tamper-evident key discovery service that providers of end-to-end encryption services could implement. Key Transparency uses Trillian's Map Mode.

Here's a good test for how good AI is for coding; take a well defined specification like an RFC that includes test vectors and just let the AI create an implementation.
I keep hearing people rave about AI so I am trying this with ChatGPT and Google Gemini and RFC 9861. So far neither have produced code that actually passes the tests.

Is this it? Do I need to try something else? Perhaps Claude Code?