top | item 35018294

Ask HN: Wouldn't it make sense to use GPG as the activitypub user?

1 points| danhab99 | 3 years ago

I was thinking about this while trying to use Mastadon. I don't get why I have to create an account on every Mastadon server just to read. The thing is that GPG is already a federated "user identification" system so why not use that to sign posts. And with Mastadon doing the ActivityPub thing I think GPG should spread to ActivityPub too. Think about it, this is what GPG was designed for.

3 comments

nl|3 years ago

The W3C DID spec enables private-key based identity in a generic way. It grew out of the ideas behind KeyBase.

There's a bunch of different DID methods, some of which use crypto ledgers to enable public key distribution. If that isn't what you want, the DID:key method[1] might be interesting.

[1] https://w3c-ccg.github.io/did-method-key/

wmf|3 years ago

It doesn't make sense to use GPG for anything because it's very obsolete. https://latacora.micro.blog/2019/07/16/the-pgp-problem.html

sp332|3 years ago

If someone wants to talk to you or like one of your posts, how would they know which server to send it to?