Home/Social Theory/Technology and Production/Digital Media and Computing/Decentralized Media/

Security

100%
Consent
FOSDEM 2025 - Consent-based Secure Collaboration with Spritely Goblins Object-Capabilitiesfosdem.org
Consent flows from the user interface actions explicitly expressing intent. One example of this is when you are uploading a file to a browser page. The web page can’t get all the files from your filesystem. There is a consent-based flow there - the file browser can obtain a capability to a specific file, which the user selects and it’s a flow that feels natural - users don’t even think about actually granting consent in that scenario but that’s the very thing they’re doing. Lemmer-Webber, Consent-based Secure Collaboration with Spritely Goblins Object-Capabilities, https://fosdem.org/2025/schedule/event/fosdem-2025-5312-consent-based-secure-collaboration-with-spritely-goblins-object-capabilities/ 12:37
Security Models and Decentralized Auth
UCAN (User Controlled Authorization Network)
GitHub - ucan-wg/spec: User Controlled Authorization Network (UCAN) Specificationgithub.com
OCapN (Object Capability Network)
GitHub - ocapn/ocapn: General planning and documentation repository for the OCapN protocol suite for distributed networked objectsgithub.com
End-to-End Encryption (E2EE)
Permissioned Data Diary 1: To Encrypt or Not to Encrypt - Daniel's Leafletsdholms.leaflet.pub
A few design decisions for a new chat platform - the sporks spacesporks.space
Aris Goudouras
ATProto opting against E2EE, claiming that social apps benefit from the server being able to read and index the data.
Feb 11, 2026
Aris Goudouras
Interesting post with some objections around federation, E2EE and in general unnecessary complexity in designing community experiences.
Feb 10, 2026