It’s all in the ActivityPub protocol that I’ll link below. If you read it, it’s strikingly clear that there is no actual guarantee that your permissions will be honored. In fact, the standard uses the term “SHOULD” quite a lot when leaving servers free to ignore your privacy notation.
Are you familiar with the FRS radios? They had a feature called privacy codes, where a group of people would set the same code to communicate. BUT, really all of the comms were all on the same channel, but the codes simply filtered out what one wanted to hear.
So they provided no actual privacy, just the illusion of it.
Same thing here, unfortunately. The ActivityPub protocol is largely a broadcast protocol, sending content into the cloud with only suggestions as to who should see it.
You can believe that every link in the chain will behave and respect your wishes, but a scraper is free to ignore them and do what they want even if your post is marked private.
https://www.w3.org/TR/activitypub/#outbox
https://en.wikipedia.org/wiki/Family_Radio_Service
npub17w…gv452
2024-06-15 18:52:39
in reply to nevent1q…t7cv
Author Public Key
npub17wky6k55xr5pcsm4f9fme4xmnhh7dr3p308smdzql2naddc0h9qqwgv452Published at
2024-06-15 18:52:39Event JSON
{
"id": "d75348fae29bb6e7b5e57cbab93c33f4c2c9a62306a044ed7df4fceadba393b6",
"pubkey": "f3ac4d5a9430e81c43754953bcd4db9defe68e218bcf0db440faa7d6b70fb940",
"created_at": 1718477559,
"kind": 1,
"tags": [
[
"p",
"f3ac4d5a9430e81c43754953bcd4db9defe68e218bcf0db440faa7d6b70fb940"
],
[
"e",
"a883342fc674eb305369e97cda9df026217b26d810813917bbe70b52982ffa17",
"",
"root"
],
[
"proxy",
"https://qoto.org/@volkris/112622145330787469",
"web"
],
[
"p",
"8240035a9f30abf3fd91387f32e922b6a1240df57fb21d9b267c1c87c65434da"
],
[
"e",
"9398ee93ba206ee0914c3540c2a6d21947699bb80872c23720505088ed4cc176",
"",
"reply"
],
[
"proxy",
"https://qoto.org/users/volkris/statuses/112622145330787469",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://qoto.org/users/volkris/statuses/112622145330787469",
"pink.momostr"
]
],
"content": "It’s all in the ActivityPub protocol that I’ll link below. If you read it, it’s strikingly clear that there is no actual guarantee that your permissions will be honored. In fact, the standard uses the term “SHOULD” quite a lot when leaving servers free to ignore your privacy notation.\n\nAre you familiar with the FRS radios? They had a feature called privacy codes, where a group of people would set the same code to communicate. BUT, really all of the comms were all on the same channel, but the codes simply filtered out what one wanted to hear.\n\nSo they provided no actual privacy, just the illusion of it.\n\nSame thing here, unfortunately. The ActivityPub protocol is largely a broadcast protocol, sending content into the cloud with only suggestions as to who should see it.\n\nYou can believe that every link in the chain will behave and respect your wishes, but a scraper is free to ignore them and do what they want even if your post is marked private.\n\nhttps://www.w3.org/TR/activitypub/#outbox\n\nhttps://en.wikipedia.org/wiki/Family_Radio_Service",
"sig": "154a2fd19d465e2ff0c1293b2edfa4878c7229c3ecf21e7cd0878a0902f3a62943e9539e387e8721a86cb21caa180cc6cccaeb3afe36673427fc2753b11cd141"
}