💻 Open-source developer!

🦊 Furry

🇨🇵 French

🌐 https://🦊✨💻.ws/

🦣 @[email protected]

Yeah, Im pretty bad at writing bios lol, but if you want to talk to me, just message me!

  • 3 Posts
  • 10 Comments
Joined 1 year ago
cake
Cake day: August 31st, 2023

help-circle

  • I have no idea about this, but as of now anyone can register.

    For reference, CSAM is Belgium’s government portal and a system of login, as far as I know, so I assume it would be used to check if someone is a minor at the time of registration

    Child safety is important but implementing this would kind of defeat the purpose of a privacy focused app.

    I agree that just gatekeeping children and therefore verifying everyone with a government platform, but then it raises the question on how to improve child safety on an app that’s self-hostable with not even user IDs to identify the users?

    I don’t have an answer to that, but I don’t like just saying “This solution is bad”, I always try to add “So try this instead, because XXX”



  • @[email protected] Hey, I’m late but I may have found something you like! It’s not for S/MIME but for OpenPGP keys, another method of email signing and encryption which does not require the certification by an authority (Actalis)

    It’s a website to list all OpenPGP public keys, and I know thunderbird (for desktop at least) automatically looks there whenever you write an email to an address to see if it has a public key.

    As far as I understand, there are some advantages and disadvantages on OpenPGP, mainly :

    • Actalis generates your private key, so if you follow the S/MIME tutorial they’ll be able to decrypt your messages. With OpenPGP it’s done locally on your computer so you don’t need to send your private key to anyone.
    • However, there is no way to easily revocate an OpenPGP key, so if yours leak, you can’t just go on your Actalis dashboard and revocate it.

    It’s up to you to pick a method based on your needs!










  • So as I understand :

    1. Actalis is a trusted authority among others but is the only one to issue free S/MIME certificates that I found. You need to use a trusted authority to make the signature, or else your email client will say “Cannot verify signature authenticity” and show a red badge. This explains it better
    2. When you sign your email, you include your public key in the signature. So just sign every email (usually an option in your client) to let anyone you email have your public key. I don’t really understand why you would need to change stuff in the email server.