The Long Tail of Work Left Until ActivityPub Has E2EE

Separate from my proposal for key transparency for the Fediverse (which I’ve certainly blogged about a lot), the W3C has been working on building out end-to-end encryption (E2EE) for ActivityPub. The two projects are mostly being developed independent of each other, though connecting the two should be straightforward. As I prepare to tie up the loose ends and call my side of the work “feature complete” and consider tagging a major version 1.0.0 for the specification and reference implementations, I thought it would be useful to lay out the work that needs to be done in order to get this over the finish line–in part, because this is where most technical folks can begin to meaningfully contribute without needing security or cryptography expertise. Unlike most of my blog posts (which are intended to be what some bloggers call “evergreen”), I fully intend for this one to be less useful over time, as the work gets done. To make the most sense, I’m going to work backwards from the desired…