What does open source itself mean?
Does it mean anybody can access information about lemmy like upvotes?
Can any person access lemmy data to know what I upvote?
What does open source itself mean?
Does it mean anybody can access information about lemmy like upvotes?
Can any person access lemmy data to know what I upvote?
they’re stored in plaintext, so anyone with access to the server can read them. i’m assuming you can’t fetch someone else’s DMs but i haven’t read the source.
If they’re federated, then you should be able to fetch them if you’ve got the URL. IDs in ActivityPub have to be dereferenceable iirc.
But like, even if they were only dereferenceable for a short time, the very act of federating the message would hand over the PM to outside the garden controlled by your instance. There’s no stopping the recipient from doing whatever they want with it.
Actually, that’s a problem on ActivityPub; DMs are hard to cipher within AP because of the AS and JSON-LD particularities. Though there’s some good software that done it, like Bonfire.