Post #3755855

Updating FEP-ef61: Portable Objects: https://codeberg.org/fediverse/fep/pulls/883 I added a section about key management. This part of nomadic identity was often misunderstood - some people thought that secret keys need to be managed by servers, and that servers could impersonate users. No, there are 3 options: - Server-side signing: secret keys are managed by a server (gateway). Activities are generated and immediately signed by a server. - Delegated signing: secret keys are managed by a separate service. Activities are generated by a server, which calls a signing service and then adds integrity proofs to activities. - Client-side signing: secret keys are managed by a client. Activities are generated and signed by a client, which communicates with a server via FEP-ae97 API. Server-side signing is easier to implement, but client-side signing was the goal from the beginning - and this is what I am trying to do with Mitra Mini #fep_ef61 #NomadicIdentity