• @pivot_root
      link
      English
      1
      edit-2
      3 months ago

      A privately-stored salt would fix that :)

      • @[email protected]
        link
        fedilink
        English
        33 months ago

        Then what is the point of hashing the data? Just use an UUID.

        Anyway, this is all pointless bike shedding because the activity needs to be associated with the actor, as it can only be accepted if the signature can be verified.