Post 9lK892zuBiVA6gpWsa by npd@octodon.social
 (DIR) More posts by npd@octodon.social
 (DIR) Post #9lK892VlzkOmbEjSue by npd@octodon.social
       2019-07-28T18:09:08Z
       
       0 likes, 0 repeats
       
       I'm still trying to understand the ocap proposals for spam/harassment mitigation in ActivityPub. Some of this is difficult to understand because it reads to me the same as proposals for spam-handling in existing systems (like email). Postage stamps, which have their own limitations/drawbacks and would require huge development/adoption, could be implemented in ocap, or in IMAP. Revoking access for a particular URL sounds similar/identical to a blocklist, etc./cc @emacsen @cwebber
       
 (DIR) Post #9lK892zuBiVA6gpWsa by npd@octodon.social
       2019-07-28T18:13:49Z
       
       0 likes, 0 repeats
       
       I think what I saw in @emacsen 's paper and in @cwebber 's https://gitlab.com/spritely/ocappub/blob/master/README.org is adding a primitive of introductions between people. So if you only wanted to receive messages from (roughly) friends of friends, you could hand out special inbox URLs to people you trust, and there could be some UI for passing those along, so that only their subsequent contacts could contact you. And if I didn't know you but wanted to, I could ask my network, "hey, can anyone introduce me to Alice?"
       
 (DIR) Post #9lK893WWESabjq5ZiK by npd@octodon.social
       2019-07-28T18:18:04Z
       
       0 likes, 0 repeats
       
       @emacsen @cwebber and that introduction functionality could be implemented lots of ways: signing other people's keys to indicate trust seems easier to me. (Indieweb's "vouch" was a little similar.)But ocap URLs would have an additional function: you could cut off an entire downstream set of people by revoking a single URL, if a whole subgroup turns out to be unwanted.But there are other confusions: if I know you through 7 connections and you cut off 2, my client has to keep a list and retry.
       
 (DIR) Post #9lK893ox7vKof0iIRk by emacsen@emacsen.net
       2019-07-28T23:26:42Z
       
       0 likes, 0 repeats
       
       @npd @cwebber Keys are complex IMHO and I illustrate that we can essentially the same benefits of key signing with a pet names based Web of Trust.But really the ocap stuff is more interesting and I think has a higher change of being adopted.