In-reply-to » @prologic what if I copy your uuid, and use it on my feed? What happens then? Also, was the dot after the timestamp intended?

@bender@twtxt.net This is sadly where you need two things:

  • A /twtxt.txt.sig (detached signauture)
  • Or a way to sign the # uuid = with a key that can be verified.

Hmmm and as I write this actually, I think this doesn’t work either, because you can still just copy it regardless. Hmmm @xuu@txt.sour.is help me out here? How do we prevent “spoofing”? 🤔

⤋ Read More