Taking Mastodon security to the next level

Posted by TankerHQ on Tuesday October 22, 2019 @10:49AM
from the dev.to dept.

https://dev.to/tanker/taking-mastodon-security-to-the-next-level-part-1-encrypt-your-toots-2p00

( 3 comments | 40 points | on HN )

Re:Taking Mastodon security to the next level by Leace on Tuesday October 22, 2019 @01:05PM (#21326044)

Seems like a technical ad for their product. If the thread model includes malicious admins then all bets are off as admins can change both server-side and front-side code.

Some measure of security could be achieved using browser extensions (c.f. Mailvelope or https://stosb.com/blog/signed-web-pages/).

[ Parent | on HN ]

Re:Taking Mastodon security to the next level by fenwick67 on Tuesday October 22, 2019 @01:11PM (#21326104)

It's also part 1 of 2 and part 2 isn't out yet, which renders it basically useless.

[ Parent | on HN ]

Re:Taking Mastodon security to the next level by giancarlostoro on Tuesday October 22, 2019 @11:35AM (#21324841)

Interesting, and I bet you could do a browser plugin to handle some of this on sites that don't support this. I wonder if OTR has a browser plugin.

[ Parent | on HN ]