We've just released Mastodon versions 4.2.4 and 4.1.12 with bugfixes and security improvements. Please consider updating!
@MastodonEngineering "just" as in: yesterday?
@dentaku @MastodonEngineering When announcing releases of open source software, sometimes it’s worth it to wait for release channels that take longer and over which you have no control. The GitHub release is only one step.
@jamie what are the other steps?
@MastodonEngineering Nice! Question like that, I was wandering about direct messages being visible for instance owners. Is it voluntary? Is it something to change in the future? Is really private messages just hard or impossible to implement with activity pub? I personally would transfer to session or for chat for a private conversation with fedi people so it's not a big deal. I'm just curious.
@jacket @MastodonEngineering
What is a really private message?
Is it end to end encrypted? With perfect forward secrecy? What end? The instance, the account or the device? And to multiple devices? Do they have individual keys per device/browser session? Do you authenticate keys to users? How do you handle adding devices/sessions/users to a chat? Removing? Backups of keys?
This has been implemented eg. by #Matrix, I don‘t see it being implemented in the fedi, it will not meet expectations.
@MastodonEngineering Thanks! Glad to have the fix for HTTP signing when query parameters are involved!
@MastodonEngineering @stefano Upgrade done :)
@MastodonEngineering still not available Android update
@arunshah240
That's an update for the server. Not the front-end.
@pieselpriemel oh , thank you for information
