@[email protected] @[email protected] basically just extract the signing subkey from the key, if it exists. certify, codesign, encrypt are not needed (atm, who knows what happens in the future.)

@[email protected] @[email protected] you can store multiple keys in a key, that might have differing authorities.

and i have no clue how it cascaded into the drive service, i'm just assuming misskey moment

@[email protected] honestly the fact it isn't sanitizing the signature is kinda worrying

reminder that the patent has expired

@[email protected] @[email protected] oh good

so i'll only be fucked if i use relays

@[email protected] @[email protected] the data it's signing is the expanded jsonld

https://github.com/misskey-dev/misskey/blob/develop/packages/backend/src/core/activitypub/JsonLdService.ts#L28
https://github.com/misskey-dev/misskey/blob/develop/packages/backend/src/core/activitypub/JsonLdService.ts#L102
https://github.com/digitalbazaar/jsonld.js?tab=readme-ov-file#canonize-normalize