• @pivot_root
    link
    English
    1
    edit-2
    29 days ago

    A privately-stored salt would fix that :)

    • @[email protected]
      link
      fedilink
      English
      329 days ago

      Then what is the point of hashing the data? Just use an UUID.

      Anyway, this is all pointless bike shedding because the activity needs to be associated with the actor, as it can only be accepted if the signature can be verified.