Hi all, I’m pretty new to the fediverse and have tried learning about the way it works. I have tried finding some information in vain, so I have ended up mostly reasoning about it by drawing parallels with other non federated systems but I feel it’s not accurate.
I am trying to understand three things:
- What information does the instance(s) have on their users?
- What information can users get on other users?
- What information can the infrastructure providers get on users of the fediverse?
To answer (1), I am guessing the admins of the instances have access to the typical metadata relating to the device from which a user accesses (IP address, device info, app/browser).
Regarding (2), it’s not as clear. As of yet, it seems it is only possible to look at posts and comments and creation date. It doesn’t seem possible to get a list of subscribed communities nor email address used for registration (when applicable).
Now I wonder if the instances do have all lists of subscribed communities? I’m guessing yes. What about private messages, are they end to end encrypted and inaccessible to the fediverse?
And finally, what access do the internet infrastructure providers have access to? All the same information as the instance admins/mods? More? Less?
Thank you for helping me weed through this new environment and learn about the fediverse.
Also, if you have some best practices on how to mindfully navigate in the fediverse with privacy in mind, please share, I would be grateful.
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
- Don’t promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
- 0 users online
- 57 users / day
- 383 users / week
- 1.5K users / month
- 5.7K users / 6 months
- 1 subscriber
- 2.96K Posts
- 74.6K Comments
- Modlog
The first and most important thing is that platforms in the fediverse that use activitypub protocol are not intended to be private communications entities, so you must be very aware that everything you post there will be publicly availabe on the internet.
Answering your questions: **1. What information does the instance(s) have on their users? **All the information you provide. Username, email, location, etc. plus some information about what you post (application, ip address). It could be different between platforms. You can check privacy policy for your platform/instance. For example mastodon.social privacy policy
2. What information can users get on other users? mainly the information you post in your profile and posts. again, it could be different between different platforms.
3. What information can the infrastructure providers get on users of the fediverse? I think this is the hardest question to answer and, maybe, an admin could have more information. So far i know, infrastructure providers cannot access any data from services they hosts. But it could depend on the provider policies.
Finally, private messages are not encrypted. You should consider just for casual communication. There are other ways to send private and encrypted direct messages.