activitypub-academy/app
ThibG f29918e707 [WiP] Whenever a remote keypair changes, unfollow them and re-subscribe to … (#4907)
* Whenever a remote keypair changes, unfollow them and re-subscribe to them

In Mastodon (it could be different for other OStatus or AP-enabled software),
a keypair change is indicative of whole user (or instance) data loss. In this
situation, the “new” user might be different, and almost certainly has an empty
followers list. In this case, Mastodon instances will disagree on follower
lists, leading to unreliable delivery and “shadow followers”, that is users
believed by a remote instance to be followers, without the affected user
knowing.

Drawbacks of this change are:
1. If an user legitimately changes public key for some reason without losing
   data (not possible in Mastodon at the moment), they will have their remote
   followers unsubscribed/re-subscribed needlessly.
2. Depending of the number of remote followers, this may generate quite some
   traffic.
3. If the user change is an attempt at usurpation, the remote followers will
   unknowingly follow the usurper. Note that this is *not* a change of
   behavior, Mastodon already behaves like that, although delivery might be
   unreliable, and the usurper would not have known the former user's
   followers.

* Rename ResubscribeWorker to RefollowWorker

* Process followers in batches
2017-09-12 23:10:40 +02:00
..
controllers Fix error when following locked accounts (#4896) 2017-09-11 23:50:37 +02:00
helpers Clean up and improve generated OpenGraph tags (#4901) 2017-09-12 05:39:38 +02:00
javascript Add section for protocol specific information on the admin page (#4910) 2017-09-12 23:06:10 +02:00
lib Fix #4894 - Merge context hash into final JSON hash after key transform (#4898) 2017-09-12 00:16:18 +02:00
mailers Set default From address in config (#3756) 2017-07-07 00:12:12 +02:00
models Fix count numbers from ActivityPub not being saved (#4899) 2017-09-12 00:16:03 +02:00
policies Add status destroy authorization to policy (#3453) 2017-05-30 22:56:31 +02:00
presenters Fix #4794 - Fake instant follow in API response when account is believed unlocked (#4799) 2017-09-05 17:48:13 +02:00
serializers Clean up and improve generated OpenGraph tags (#4901) 2017-09-12 05:39:38 +02:00
services [WiP] Whenever a remote keypair changes, unfollow them and re-subscribe to … (#4907) 2017-09-12 23:10:40 +02:00
validators Pinned statuses (#4675) 2017-08-25 01:41:18 +02:00
views Add section for protocol specific information on the admin page (#4910) 2017-09-12 23:06:10 +02:00
workers [WiP] Whenever a remote keypair changes, unfollow them and re-subscribe to … (#4907) 2017-09-12 23:10:40 +02:00