News for hackers. Stuff that matters.
Re:Mastodon Explained by cycomanic on Sunday November 06, 2022 @12:16AM (#33488915)
But for encrypted DMs you need per user keys that are stored on the users computer, otherwise the owner of the server has control over the key and we're back at square one. Or am I somehow misunderstanding you?
Re:Mastodon Explained by yarg on Sunday November 06, 2022 @05:08PM (#33497915)
You can use client side symmetrical crypto to allow for the private key to be stored on the server.

It means that weak keys are a problem, but that's been the case since the dawn of time.