Friendly reminder that even if you trust your admin, direct messages can be read by them. Private communications should be done via tools designed for this.
--
Friendly reminder : même si vous faites confiance a votre admin, il peut lire vos messages privés (DM). Les communications privées devraient se faire grace a des outils pensés pour ça.
@0xroy Eve, a rogue instance admin, can fake a self-undermining Toot from @You, fake a boost of this Toot on her rogue instance by innocent user @Doe@rogue.instance, then pretend that You deleted the original self-undermining toot.
Defending yourself: You could sign cryptographically all yours toots.
Les admin des autres instances peuvent crediblement vous attribuer tout propos.
Parade possible: signez cryptographiquement tous vos pouets.
@xdej spoofing is a thing. people should be aware of this technical detail. But I still wont sign my toot lol. ppl used to spoof emails, forge tweets etc. U want a proof of something being said ? put it on a wayback machine i dunno.