ecosistema-social-decentralizzato/topics/security.md

Security

Designing for public communication requires less focus on privacy than more intimate social applications. However, privacy for user metadata is still important, and private direct messaging is a feature that may need to be supported.

Some e2e messaging encryption options:

• Noise protocol
• Messaging Layer Security (MLS)

Access Control

Different levels of access to user data can be controlled through server permissions on federated systems. In p2p systems, access control must be implemented through cryptographic permissions, or access control lists.

Object capability security authorization system