• Skull giverA
    link
    fedilink
    arrow-up
    4
    ·
    3 days ago

    ActivityPub is actually a good way to authenticate things. If an organization vouches for something they can post it on their server and it can be viewed elsewhere.

    AP has some pretty big issues when it comes to moving servers, expiring and re-purchased domain names, and other such edge cases. Servers either blindly accept new keys after a certain time, or are vulnerable to enabling key ransoming after hacks (the reason HKPK went nowhere).