Github GPG keys

I write code, I play bass, that’s about all I’m rn

  • 2 Posts
  • 43 Comments
Joined 3 years ago
cake
Cake day: July 3rd, 2023

help-circle






  • When I read about this I’m always brought back to the conversation of “internet as a public utility”. I hope it’s cool if we can take a tangent.

    See unlike any of our other utilities like natural gas electricity water and sewage, the only thing that could potentially give any meaningful information about us is our sewage, and the government already tests sewage for diseases. If we allow the government to “sell” us our internet they would basically be able to know everyone we are “talking too”. Also how could we ever have enough regulatory oversight to protect everyone on the internet. Symmetrically if the government wants to have so much regulatory control over our internet it should maybe pay for it.

    Like I wouldn’t mind even paying another 50 bucks a month extra for “private internet” just so the government can have their free and regulated “public internet”. Or would I (⁠・⁠–⁠・)⁠ゞ?




  • There is a metadata protocol called opengraph, it’s how apps get the information to display a rich preview. Basically the app takes the link as it’s written in the SMS message or Twitter thread and then it tries to fetch that page and then read the open graph metadata from inside. That should give it enough to show a title description and a background image, considering the web developers implemented opengraph.

    If Google is planning to use their own servers basically as a proxy then all this means is that the opengraph rich metadata is going to be a little more stale than if the app just fetch the page and generated the rich metadata itself











  • So Activpub needs an actor with an inbox and outbox to send and receive content. A did is a virtual actor that reroutes to a real actor and collects content across real actors.

    Gpg public keys have a dedicated email address field. And if you don’t want to share your “real” email address then just make a new one. (edit) Or don’t include one.

    And the did stores ur profile picture a public key display names bio etc etc.

    Yeah that’s a pain point I experienced with Gpg armored packets, I couldn’t figure out a way to pack in a PFP. Even shrinking it to 64x64 made the public key file feel too heavy. So I just decided profile pics are out of scope and you should just use gravatar.

    U could use pgp as the key in the did if the devs want to support it as a cryptography protocol. The did is also used to sign each message similar to pgp. U simply need more functionality than what pgp provides.

    I 80% agree. I do wish PGP armored packets had extra fields and if that’s an RFC that could be sent to the Gnupg maintainers then gpg would be absolutely perfect but I haven’t gotten around to figuring that out. All things considered since GnuPG already exists and it’s already installable everywhere and it already works I figured I could just roll with it for userless atleast. I want to use GPG for all user authentication related concerns.


  • Whelp here I go again

    Why not GPG!!??

    I’ve been working on my own idea for what the “fediverse” should be, I’m calling it userless because I want to avoid users in the database and I wanna use GPG as the individuals identity because it already exists and can yes perfectly verify for me who created a post, I’m not sure why we need more than that.

    I haven’t flushed the whole thing out yet and I plan to hand write proper docs for the protocol.

    But GPG has been around since forever. I’ve been told that it’s too hard to use, it’s insecure, it’s too old. And when I use the thing I just don’t agree, there is nothing technically wrong with the product like it should be way more popular.