Home | Notifications | New Note | Local | Federated | Search | Logout

andros@andros@activity.andros.dev

🏗️ Full-Stack developer (Mainly Python)
✍️ Writer (3 books)
🐧 Creator of Org Social, Django LiveView, Maza ad blocking and so on
👨‍🏫 Teacher
🟣 Emacs addicted
🗼 Amateur radio
🐱 Cat food opening

I write in 🇬🇧 English and 🇪🇸 Spanish

Website: https://andros.dev
Blog: https://andros.dev/blog
Meshtastic Node ID: !02e584cc
XMPP: xmpp:me@im.andros.dev
Org Social: https://host.org-social.org/andros/social.org
Gemini capsule: gemini://andros.dev
Joined: 2026-07-27 20:34:15
4 notes, 0 following, 0 followers

Reply to @sun@shitposter.world
andros@andros@activity.andros.dev (2026-08-20 20:29:25)
@sun @feld Yes, or like a changelog, diary, microblogging... the sky is the limit!

andros@andros@activity.andros.dev (2026-08-19 18:31:04)
Finger never had a search engine, so I made one: crossed-fingers

An aggregator that collects .plan files and indexes them for text searching.

$ finger help@crossed-fingers.andros.dev

#finger #smallnet #tildeverse

Reply to @sun@shitposter.world
andros@andros@activity.andros.dev (2026-07-27 22:06:26)
@sun Good question: Fair, but two separate things.
Deniability: correct, and intentional; HMTP trades deniability for unforgeable authenticity, you can't have both at once (same tradeoff signed PGP/S-MIME always had).
Attachment privacy: valid gap as written. The {hash, url, size} scheme doesn't say the bytes are encrypted before storage, so as described, anyone with the hash+URL could fetch them.
Fix is the same trick used for the body: seal the attachment client-side with the same X25519 sealed box before upload, so the hash addresses ciphertext, not plaintext (what Signal/Matrix do for media). Worth noting attachments aren't in the working prototype at all yet… this part was design-only. Please be understanding, I wrote it on Sunday afternoon while having a coffee. 😄

andros@andros@activity.andros.dev (2026-07-27 17:28:50)
«Modern email can be built from borrowed parts»

What if we designed the successor to email on top of HTTP, fixing 40 years of SMTP design flaws using only technologies that already exist?

https://en.andros.dev/blog/d7ed8b07/modern-email-can-be-built-from-borrowed-parts/

#Email #ActivityPub #OpenWeb #Python