@thisismissem@activitypub.space
How would a consent-by-default protocol behave like?
2026-07-20 19:00 UTC
Take a look at the work Christine did in OcapPub, it's kinda like this, excepting not doing encryption, since typically in AP/AS2 the interactions are over HTTPS connections, and the server has to be a party. The AP E2EE taskforce under swicg is the first case of doing E2EE where it uses MLS over ActivityPub
Replies (1)
-
@csolisr@hub.azkware.net 2026-07-20 19:29
Yep, I'm reading the paper draft: codeberg.org/spritely/ocappub I'm not exactly happy about the fact that the document hasn't been updated in years, and it's missing an answer to the most important question I have about OCapPup: what happens when one of the parties goes rogue, and decides to disobey a request to, for example, restrict relaying a message? I'm aware that the protocol is intended to encode consent permissions, but without an effective mechanism to actually have revocations enforced, it's barely an improvement over the current system.