41
submitted 1 month ago* (last edited 1 month ago) by Kalcifer@sh.itjust.works to c/privacy@lemmy.ml

By "push server" I mean something like Ntfy.sh.


Cross-posts

you are viewing a single comment's thread
view the rest of the comments
[-] rcbrk@lemmy.ml 1 points 1 month ago

You could have a look at the messages ntfy is passing around using its trace function: https://docs.ntfy.sh/troubleshooting/

[-] Kalcifer@sh.itjust.works 1 points 1 month ago

I enabled logging in the Ntfy app, and, upon receiving a message in Element X, it showed the Matrix notification push message in plain text in the logs. If Ntfy indeed doesn't know anything about Unified Push and is just the medium through which a Unified Push message travels, then I would think that it wouldn't be the service decrypting the message, yet it is decrypted in the logs.

[-] rcbrk@lemmy.ml 2 points 1 month ago

Yeah, I was doing some more reading and I think it might only be the newest version of the UnifiedPush spec which requires the message to be encrypted.

I noticed that the examples given on https://codeberg.org/iNPUTmice/up/src/branch/master/README.md are unencrypted.

[-] Kalcifer@sh.itjust.works 1 points 1 month ago

Yeah, I was doing some more reading and I think it might only be the newest version of the UnifiedPush spec which requires the message to be encrypted.

The question I would then have is: Who would be responsible for updating their system to support this (ie the Unified Push encryption)? Say if we, for example, look at Matrix. Would Matrix need to modify their notification API? Would the Matrix gateway in Ntfy need to be modified? Would some other component of Ntfy be modified? Would the distributor app need to be modified? Would the end-user application need to be modified?

this post was submitted on 04 Nov 2024
41 points (100.0% liked)

Privacy

32465 readers
433 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS