• pivot_root@lemmy.world
    link
    fedilink
    English
    arrow-up
    8
    ·
    2 months ago

    Exactly. If private votes were intended, Lemmy servers would have had voting privacy setting where the vote is federated as @privacy-vote-{sha256sum userid & postid}@instance.foo instead of the actual voter’s username.

        • rglullis@communick.news
          link
          fedilink
          English
          arrow-up
          3
          ·
          2 months ago

          Then what is the point of hashing the data? Just use an UUID.

          Anyway, this is all pointless bike shedding because the activity needs to be associated with the actor, as it can only be accepted if the signature can be verified.