I'm not certain that the correct answer, though.

#TedUnangst seems to be off the Fediverse (and maybe the web) but linking this here for posterity: https://github.com/timkuijsten/honk/blob/fork/encrypt.go

For sure. Mainly I'm thinking about "Pretty Good Obfuscation" than a good solution. Something better than in the clear.

Really, delivery isn't guaranteed, so there are already potential issues about tampering that encryption won't necessarily fix, just maybe make abusing it harder.

I think some people were using PMs for potentially sensitive info (addresses, Venmo, etc.), and having them slightly more secure puts people at ease.

What about standard public-key stuff, dropping a short public key in a metadata field, keeping the private key on the endpoint or in the client?

I forgot the ring.

Would be an interesting way to publish public keys. #