This looks interesting but it's horrendously long and my eyes glazed over (need more coffee...). Is there a shorter description of what it does? I.e. what are the keys used for and how are they generated? What is it that's getting encrypted? It sounds like it's supposed to be E2EE for PM's. A two or three sentence description saying how the E2EE works and how the private keys are stored would be very helpful.

Very cool!

I can't wait for the entire Fediverse to be E2EE (soon™)

For those who did not read the article yet, please do. It's very interesting

What would world do without furries? ☺️

Biggest issue is that people do not understand encryption. Even Matrix has same issue and they try to add hidden encryption. Though ye e2e will make web more secure. BTW great blog post was nice to read.

Is this e2ee or just public signing? Signing sounds most doable to make sure a message came from the server it claims is from. 

Great post. Looking forward to a more secure fediverse. This more important now than ever.

I read the post, its very exhaustive and future seems promising. I might have missed the section but why it this separate mechanism needed in the first place? Is it just because of the key lifecycle management? If so, naiive approach of publishing public key on your profile falls short because of this and without public key management everything falls apart sooner than later?

If I'm getting this correct, would it be something similar to AT Protocol's relay servers, except just for keys? If so, it could have some interesting (positive) repercussions to a chain of trust, as then mismatches could more easily indicate suspicious servers.

I wonder why they didn't build on top of matrix...

Neat!