Important progress has been made regarding bringing MLS end-to-end encryption to the ActivityPub protocol, with developers already building implementations and providing feedback to a future version of the protocol spec.

you are viewing a single comment's thread
view the rest of the comments

[–] WhyJiffie@sh.itjust.works 1 points 4 hours ago (1 children)

but wouldn't you also need to verify the matrix/signal contact? both of them gives you the option to verify the other, but its very rarely used by people. so, you need either an already verified secure channel, or meeting on the street.

but then again we don't actually know each other. so if we meet, how would you know it's actually me, and not someone impersonating me?

[–] gajahmada@awful.systems 1 points 3 hours ago

how would you know it's actually me, and not someone impersonating me?

Well, yeah the assumption here is that we both already knew and trust each other IRL and you personally give me this contact info and the check is there to make sure I was actually connected to you.

We as layman didn't do this but I would assumed someone who is a high profile target actually do this kinds of checks.