News for hackers. Stuff that matters.

A comment on Pixelfed leaks private posts from other Fediverse instances. Parent comment

Re:Pixelfed leaks private posts from other Fediverse instances by p2detar on Monday March 31, 2025 @09:18AM (#43534728)
That's not how it should work though. The post should get encrypted only once with a symmetric key i.e. AES, and then this gets encrypted with each of the followers' public keys. So it's not the post itself but the encryption key that must be scaled. This is how PGP-encrypted E-mail works.
[ Parent | on HN ]
Re:Pixelfed leaks private posts from other Fediverse instances by Raed667 on Tuesday April 01, 2025 @03:10PM (#43550346)
you’re still encrypting n-times, the post needs to be stored n-times and that’s even before thinking about key rotation and server portability

this is not practical

[ Parent | on HN ]