Privacy

42718 readers

1295 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 6 years ago

MODERATORS

Open email ... will it be a game changer? (www.open.email)

submitted 2 months ago by trilobite@lemmy.ml to c/privacy@lemmy.ml

38 comments fedilink hide all child comments

Just come across this. Haven't dug too deep but sounds like an interesting opportunity. I think it can only succeed if it is fully compliant with current systems. Seems to only be mobile clients. No desktop? Are big tech going to permit this to grow? It would shut down a data mining opportunity ...

you are viewing a single comment's thread
view the rest of the comments

[–] rrobin@lemmy.world 2 points 2 months ago

Looks cute - internally it sounds like XMPP rosters if we imagine all mail messages/attachments are pulled too.

Some issues at a glance

no display names is a good thing - but then "name is retrieved from their public profile" does not sound very good
ascii for local usernames will probably annoy a lot of people, maybe we should just remove the letters and just issue people numbers (i'm not being sarcastic)
disallowing IP addresses in the remote part by definition sounds unnecessary

I think there are some gaps on the notification side of things - the agent not being able to verify them (and maybe dropping) or conversely accepting notifications that it should not.

What really puts me off here is the unnecessary use of HTTP .e.g discovery moves from DNS to well known file (webfinger?). Not sure what the benefit is, but ok. And the use of a novel authentication scheme makes me nervous.

It was a nice read and I agree with the point that making this pull based helps. But I wish it did not try to invent so much in one go