Alright, I implemented the auth mode. It's not difficult, but it requires the actor of outer activity to be the same as the actor of inner (plaintext) activity. With base mode (5.1.1), the actor of outer activity could be different, which means we can hide the real sender.
Do you think it's worth doing this?
I think authentication of the sender at the HPKE level shouldn't be necessary because the inner activity is self-authenticating (includes integrity proof).
silverpill
npub19y…5wysk
2026-07-25 19:44:26 UTC
in reply to nevent1q…d8yz
Author Public Key
npub19yg7mshq9vdtvvcm48svw03cmzewue4jug62cltnleh3y78khz5sm5wyskSeen on
wss://relay.momostr.pinkPublished at
2026-07-25 19:44:26 UTCEvent JSON
{
"id": "82c487f06d04d35236f8b9c3da2af5d587d02e571ff062d8de5d4751a8d2796f",
"pubkey": "2911edc2e02b1ab6331ba9e0c73e38d8b2ee66b2e234ac7d73fe6f1278f6b8a9",
"created_at": 1785008666,
"kind": 1,
"tags": [
[
"p",
"8d460d6a13ed3f5d251207ed323436ebebe126a43b143e25dd053cd471e0df45"
],
[
"p",
"2911edc2e02b1ab6331ba9e0c73e38d8b2ee66b2e234ac7d73fe6f1278f6b8a9"
],
[
"p",
"1690b24ed3894f2c26aa363e294e6e54b7e023e8ebf74c16ce0a225c87cfc435"
],
[
"p",
"677402b7647146d8d513c27988818e9819ac9642fae4ae3f0b736461c5b5c172"
],
[
"e",
"0a18a3a3c0d8840dfe9fdec4ded6694f73249d3561fadaed35099501abeb5d71",
"",
"root",
"1690b24ed3894f2c26aa363e294e6e54b7e023e8ebf74c16ce0a225c87cfc435"
],
[
"p",
"2ceb75c8271582855ec79d56c3f90da020e88de9f98dd6e76a1c7e436d5da02a"
],
[
"e",
"05da11fd44a71894377e29fb47f1e76b3ea08f801aaabf40cd7a1dbeac715b86",
"",
"reply",
"bceff9fdfb6c4a6183d31e9173bc52b285d5ba89ff4db68cca73bbeba540c239"
],
[
"p",
"bceff9fdfb6c4a6183d31e9173bc52b285d5ba89ff4db68cca73bbeba540c239"
],
[
"proxy",
"https://mitra.social/objects/019f9ace-b6c2-7950-ad08-d17b01473f1d",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://mitra.social/objects/019f9ace-b6c2-7950-ad08-d17b01473f1d",
"pink.momostr"
],
[
"-"
]
],
"content": "Alright, I implemented the auth mode. It's not difficult, but it requires the actor of outer activity to be the same as the actor of inner (plaintext) activity. With base mode (5.1.1), the actor of outer activity could be different, which means we can hide the real sender.\n\nDo you think it's worth doing this?\n\nI think authentication of the sender at the HPKE level shouldn't be necessary because the inner activity is self-authenticating (includes integrity proof).",
"sig": "20f769e621331aaab45706832866c08272b0e810cb127f0faa7f31d53c93968619b99f4748a3cfc8e6d7a820b96ef152a54492e3bd9420ead18e630fbe20ab88"
}