Chee Aun 🤔

We are implementing the final version of RFC9421 (HTTP Signatures) in Mastodon, and would like to test this with other ActivityPub implementations.

Do you know of any AP implementations supporting both incoming (verification) and outgoing (signing) RFC9421 signatures, and if possible with support for the double-knocking mechanism as described in https://swicg.github.io/activitypub-http-signature/ (section 3.5)?

#activitypub

After reviewing FEP-5624: Per-object reply control policies and GoToSocial's interaction policy spec, I find myself leaning toward the latter for long-term considerations, though both have merit.

FEP-5624 is admirably focused and simpler to implement, which I appreciate. However, #GoToSocial's approach seems to offer some architectural advantages:

1. The three-tier permission model (allow/require approval/deny) feels more flexible than binary allow/deny


2. Separating approval objects from interactions appears more secure against forgery


3. The explicit handling of edge cases (mentioned users, post authors) provides clearer semantics


4. The extensible framework allows for handling diverse interaction types, not just replies

I wonder if creating an #FEP that extracts GoToSocial's interaction policy design into a standalone standard might be worthwhile. It could potentially serve as a more comprehensive foundation for access control in #ActivityPub.

This is merely my initial impression though. I'd be curious to hear other developers' perspectives on these approaches.

#FEP5624 #fedidev #fediverse #replycontrol #interactionpolicy

It's been a rainy day in Zurich, so I had a free hour to prototype some changes to how media is attached to posts in #Pachli.

What do we think?

Medien: 1

さらなる開発リソース確保のためMisskeyのスポンサーを募集しております​​

More human curated data has arrived!

communityDB/apps.json

https://github.com/fedidb/communityDB/blob/main/apps.json

Add or update your apps as needed (with a PR), this will power the new Apps section in the new #FediDB ✨

Hello! We're the team that builds and supports Mastodon, alongside the community. Today, we wanted to share an update on our organisation. https://blog.joinmastodon.org/2025/05/evolving-the-team/

:mastodon: We’ve shipped Masto.js v7.0.0 today! No big features or anything, just dropped Node.js 18 support and did some small refactors
🔗 https://github.com/neet/masto.js/releases

don’t be surprised if you get a notification in 30 years that a poll has ended #Fedicat #Mitra

Medien: 1