indeed, difficult problems abound - but signal or briar style tradeoffs may be acceptable to those looking to make use of encrypted DM type comms.
this comment by @yote_zip@pawb.social in the thread points to at least one early consideration on the issue.
anyone who cares (as you do) knows that e2ee is hard as hell to implement properly, especially when its user facing. lots of traps at every step, but there are possible paths if we define what we want to achieve and make that scope crystal clear to the user. improper / mistaken tool use is often much worse than no tool at all. federation makes tool selection all the more important.
as for me, fediverse e2ee would be an initial channel to establish connections that may lead to other, more suitable channels. confirmed identity of internet strangers (beyond initial key exchange) in this particular venue is less important to me than the ability to pass a few ephemeral, secure messages. in my world, who I send my grandmother’s super secret meat sauce recipe to is slightly less important than putting clear text on the wire or into instance storage for anyone to potentially see… forever. everyone has their own requirements and its unlikely that fedi e2ee will satisfy them all.
indeed, difficult problems abound - but signal or briar style tradeoffs may be acceptable to those looking to make use of encrypted DM type comms.
this comment by @yote_zip@pawb.social in the thread points to at least one early consideration on the issue.
anyone who cares (as you do) knows that e2ee is hard as hell to implement properly, especially when its user facing. lots of traps at every step, but there are possible paths if we define what we want to achieve and make that scope crystal clear to the user. improper / mistaken tool use is often much worse than no tool at all. federation makes tool selection all the more important.
as for me, fediverse e2ee would be an initial channel to establish connections that may lead to other, more suitable channels. confirmed identity of internet strangers (beyond initial key exchange) in this particular venue is less important to me than the ability to pass a few ephemeral, secure messages. in my world, who I send my grandmother’s super secret meat sauce recipe to is slightly less important than putting clear text on the wire or into instance storage for anyone to potentially see… forever. everyone has their own requirements and its unlikely that fedi e2ee will satisfy them all.