@madsenandersc@social.vivaldi.net
Post #1670695
2026-04-25 16:38 UTC
@benjaoming
I'm not an expert on this in any way, but I think building a legal consent into a data transfer protocol might be difficult, especially if said protocol is encrypted.
You basically could not verify what is being transferred without decrypting the data stream, and in essence perform i man-in-the-middle attack.
I'm pretty sure that the legal framework has to be built on top of the application, not the protocol.
Replies (1)
-
@benjaoming@social.data.coop 2026-04-25 18:26
@madsenandersc all clients on the Fediverse should hopefully use the ActivityPub protocol, and if a client happens to be a bot or AI scraper, I would expect them to read the field that tells them they can't do LLM training and/or personal profiling. Hopefully we can afford enforcement to tell if an LLM model suddenly contains data that was labeled to not allow this. Even better if data protection laws like GDPR provided this protection by default, though.