-

2026-07-28 00:02:28

silverpill@mitra.social

FEP-0806: Simple client-side encryption

https://codeberg.org/silverpill/feps/src/branch/main/0806/fep-0806.md

The FEP now includes the recommended algorithm parameters.

I consider it finished but I don't plan to continue working on my implementation or publishing to the main FEP repository. It would be better to focus on group messaging with forward secrecy (MLS or similar).

#fep_0806 #e2ee

2026-07-28 02:06:49

elle

elle@weathered-steel.social

@silverpill nice! there is a workgroup meeting tomorrow for activitypub-e2ee, are you planning to be there?

https://www.w3.org/events/meetings/ad4d3e0b-e227-4119-acdc-9943a2b19f70/20260728T150000/

2026-07-28 17:41:45

silverpill

silverpill@mitra.social

@elle No, I don't want to participate in corporate takeover of fediverse. I didn't come here for gatekept workgroups and endless meetings.

2026-07-28 17:59:22

nicole mikołajczyk 🔜 cebulacamp

mkljczk@fediverse.pl

@silverpill @elle >endless meetings

the E2EE TG appears to be a weird one that already presented something useful

2026-07-28 18:50:47

elle

elle@weathered-steel.social

@silverpill understandable. fwiw the gate is pretty easy to open, but does require signing a CLA.

how else do you suggest we develop an E2EE protocol for the fediverse? you mention in your FEP that you are giving up on it for a proper E2EE impl. genuinely asking b/c I'm interested in getting E2EE, hopefully interoperable with widest number of clients possible.

also, what do you mean by corporate takeover?

2026-07-28 22:29:34

silverpill

silverpill@mitra.social

@elle

fwiw the gate is pretty easy to open, but does require signing a CLA.

It's not that simple. But it might appear easy if you don't inconvenience them too much, and jump through all the hoops https://github.com/swicg/charters/blob/main/stage-process.md

how else do you suggest we develop an E2EE protocol for the fediverse?

In the same way as everything up until this moment has been developed. Somebody just needs to do it.

If the result is good, others will copy it.

>you mention in your FEP that you are giving up on it for a proper E2EE impl. genuinely asking b/c I'm interested in getting E2EE, hopefully interoperable with widest number of clients possible.

Not giving up - I want to explore a more advanced encryption scheme. I think the basics are not going to change too much.

also, what do you mean by corporate takeover?

A lot of things.

2026-07-28 22:48:26

silverpill

silverpill@mitra.social

@elle

also, what do you mean by corporate takeover?

This pictu

nicole mikołajczyk wrote the following Beitrag Mon, 30 Sep 2024 15:00:28 +0200

A part of article from Meta about Fediverse. On the graphic there’s a headline saying ‘The fediverse allows you to communicate across different servers’ and three planets: Threads which connects to Tumblr, which is connected with Flipboard. <br />There’s also a forth planet with no label and no visible connection.

this is by far the best depiction of the fediverse ever created

[source](https://about.fb.com/news/2024/06/what-is-the-fediverse/)

(thanks @mkljczk)

2026-07-28 23:05:55

elle

elle@weathered-steel.social

@silverpill yeah, that staging process is definitely more bureaucratic and formal than "write a FEP, implement it, respond to feedback". but plenty of non-corpo entities have a similar level of bureaucracy, especially in the standards space. idk, am relatively new to the space, so if there is some history or context I'm missing, I'm open to new info.

I'm also down to work together with you on writing an FEP together, and/or writing up some of my ideas about how an MLS-based protocol could work

2026-07-29 20:32:52

silverpill

silverpill@mitra.social

@elle

bureaucracy

Bureaucracy is not necessary, the FEP process proves that. However, I can tolerate bureaucracy if people who are running the standardization process are qualified for the job. E.g. I wouldn't mind if fediverse was represented by an alliance of Mastodon, PeerTube and Lemmy developers.

I'm also down to work together with you on writing an FEP together, and/or writing up some of my ideas about how an MLS-based protocol could work

That would be great, although I am not sure if MLS is our best option. It is too complicated.

2026-07-30 01:03:12

elle

elle@weathered-steel.social

@silverpill I agree MLS is complicated, however it's the best standard for doing E2EE, and it's been vetted by a number of trustworthy professional cryptographers. whatever alternative is chosen would need to meet at least that level of scrutiny. also, if we want to be interoperable with what SWICG is working on, it would need to be MLS based, as that's what they've chosen.

if going in a totally different direction, I'd be interested to hear what you have in mind

2026-07-30 01:54:59

silverpill

silverpill@mitra.social

@elle If nobody can implement it, it's a bad standard.

I didn't say that we should go in a totally different direction. But how ActivityPub E2EE will look like remains an open question.

2026-07-30 04:51:15

elle

elle@weathered-steel.social

@silverpill absolutely, E2EE is still WIP. I don't think MLS is so complicated that no one can implement it. in a lot of cases, implementers shouldn't have to touch the low-level MLS implementation. OpenMLS exists for Rust, and ts-mls exists for TS/JS. the OpenMLS can be wrapped by anything that can talk to a C FFI. at least how I understand the Embassy/Bonfire impls, they are using those MLS primitives to build up the protocol.

2026-07-30 08:48:25

silverpill

silverpill@mitra.social

In addition to MLS, I want to explore:

- DMLS variants
- BeeKEM
- Autocrypt

2026-07-30 09:51:16

Jupiter Rowland

jupiter_rowland@hub.netzgemeinde.eu

@elle @silverpill Out of curiosity, what about pure PHP applications that only use a wee bit of JavaScript for the UI?

2026-07-29 11:54:24

Grey Area

greyarea@mitra.vpclmulqdq.moe

@silverpill

With NIKE (Non-Interactive-Key-Exchange) one sided forward secrecy is the best you can get. AFAIK the fediverse model strongly favors 0-RTT messaging, so I think the FEP as designed is close to ideal, as something simple that fits the use-case.

I will be the first to admit that my knowledge in the protocol is severely lacking, but if you have cryptography related questions, please let me know.