littleMesh addendum: readable handles and replaceable relays

Yesterday's post left one thing unsolved. Your littleMesh identity is your Ed25519 public key, which is great for security and terrible for a handle: nobody wants to type @alice@a1b2c3...52-characters....mesh.littlefedi.social, let alone read it out loud. And the lighthouse we mentioned, the relay that introduces you to the world, was baked into that identity too. Change relay, and you'd look like a different node.

We've been studying how to fix both, and we think we see a path.

The idea is a small signed directory sitting next to the mesh itself. You'd reserve a friendly alias, something like red-house.mesh.littlefedi.social, and your node would publish a signed record binding that alias to your node ID and to up to three lighthouses. Signed with the same mesh key you already have, no new identity, no new PKI. The record would carry a sequence number and an expiry, so nobody, not even the directory operator, could roll it back to an older version or serve a stale one past its time.

What we like about it is what it wouldn't change. Your handle would stay @alice@red-house.mesh.littlefedi.social, readable. Underneath, WebFinger would still resolve to your real actor ID, the one built from your node ID, exactly as today. And switching lighthouses, would just mean publishing an updated signed record. Same handle. Same actor ID. Nobody following you would notice anything happened.

The directory itself would stay deliberately weak in what it's trusted with. It couldn't produce a valid record for your node ID without your key, and every connection would still authenticate the node ID end to end, so even a malicious or compromised directory could deny service but never impersonate you.

We're building this over the next few days, opt-in, as an experiment. Once it's up, we want to see it survive a real follow exchange with stock Mastodon, snac and GoToSocial, and a lighthouse swap that doesn't touch the handle, before deciding whether it earns a permanent place in littleMesh or gets reworked. Worth trying, not yet worth trusting.

#littleFedi #littleMesh #Fediverse #OwnYourData

@sturai@masto.es It's a mixed approach: you can have your official domain (like example.com) and still federate via mesh. But you (currently) cannot change the domain name, so if your primary use is via lighthouse, you need to stick with the lighthouse's domain (for proper federation). This is because we need to keep compatible with the other ActivityPub implementations and the domain name needs to stay static.

There are some workarounds like you can have more lighthouses and they can have the same domain (we call it suffix).

True decentralisation via total domain name swapping could be feasible but it would only work between littleFedi instances, as Mastodon and other ActivityPub implementations wouldn't support it.

Anyway, we're still trying to find a reliable workaround for this. My dream would be total decentralisation and total migration from one relay to another, like Delta Chat.

We already tested something similar and it worked, but broke federation with other AP implementations.

@Linux@planet.moe littleMesh lets a littleFedi instance federate without a public IP address, a
DNS name, or an inbound port: from behind home NAT, behind CGNAT, on a laptop,
on a Pi plugged into a router nobody administers.

It is an additional transport, not a new protocol. ActivityPub, WebFinger, HTTP
Signatures, media fetches and the delivery queue all run over it unchanged.

Two kinds of machine take part:

• a node is an ordinary littleFedi instance that cannot accept incoming
  connections;
• a lighthouse is a small publicly reachable relay that introduces nodes to
  each other and copies encrypted bytes between them. It stores no accounts,
  reads no messages, and hosts no identities.

You need at least one lighthouse somewhere. It can be someone else's, a €3 VPS
of your own, or a machine you already run with a public address.

But we're also planning to run two "public" lighthouses and let the "littlefedi init" process to pre-configure them. Going online will really be a matter of seconds - without even needing a reverse proxy.