Let's talk about object ownership in #ActivityPub
I'm writing a new FEP: https://codeberg.org/silverpill/feps/src/branch/main/c7d3/fep-c7d3.md
This topic is rarely discussed, but any server that doesn't implement ownership checks as described in this document is likely vulnerable to impersonation attacks.
silverpill /
npub1df…27gmw
2024-06-02 23:51:44
Author Public Key
npub1df0nthpgzfmvxrzj0cfypmmt45l0y770j260auqhm3l45hp3uhkqx27gmwPublished at
2024-06-02 23:51:44Event JSON
{
"id": "f319a6c3944037b1aab7a5ad00b2db9fdc7f9ef73931994deac1a8ce684d9bf2",
"pubkey": "6a5f35dc281276c30c527e1240ef6bad3ef27bcf92b4fef017dc7f5a5c31e5ec",
"created_at": 1717372304,
"kind": 1,
"tags": [
[
"t",
"activitypub"
],
[
"proxy",
"https://mitra.social/objects/018fdb5d-bc2f-3164-bbb3-b3fd0a1c99a0",
"activitypub"
]
],
"content": "Let's talk about object ownership in #ActivityPub\n\nI'm writing a new FEP: https://codeberg.org/silverpill/feps/src/branch/main/c7d3/fep-c7d3.md\n\nThis topic is rarely discussed, but any server that doesn't implement ownership checks as described in this document is likely vulnerable to impersonation attacks.",
"sig": "9d91a967fcd5670c678497d05d90a241f551f2fa6c21588f62fb72a8c2f145e0c3613fcfe21af66ba2edff56db29ab7abdfb33160762dd38cfcb08a78f5d177b"
}