Can a Unified Push push server see/read notifications? (sh.itjust.works)

submitted 1 month ago* (last edited 1 month ago) by Kalcifer@sh.itjust.works to c/privacy@lemmy.ml

28 comments fedilink hide all child comments

By "push server" I mean something like Ntfy.sh.

Cross-posts

https://sh.itjust.works/post/27577324

you are viewing a single comment's thread
view the rest of the comments

[-] dessalines@lemmy.ml 14 points 1 month ago* (last edited 1 month ago)

Yes, I believe all the messages are in plain text, and it's up to the server not to log it.

It is possible to e2ee the message content yourself tho.

Edit: it looks like ntfy.sh specifically keeps messages cached in memory for a few hours befor discarding them. https://docs.ntfy.sh/config/

[-] Kalcifer@sh.itjust.works 1 points 1 month ago

Isn't this contradicting the Unified Push spec? It states:

Push message: This is an array of bytes (ByteArray) sent by the application server to the push server. The distributor sends this message to the end user application. It MUST be the raw POST data received by the push server (or the rewrite proxy if present). The message MUST be an encrypted content that follows RFC8291. Its size is between 1 and 4096 bytes (inclusive). [1]

References

Unified Push spec. Unified Push. Accessed: 2024-11-22T05:07Z. https://unifiedpush.org/developers/spec/android/
- "Developers/Specifications/Android". §"Resources"

this post was submitted on 04 Nov 2024

41 points (100.0% liked)

Privacy

32465 readers

426 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS