Renaud Chaput
renchap.oisaur.com
Renaud Chaput
@renchap.oisaur.com
Co-Founder & CTO @notos
Technical Director @Mastodon #mastodev

Technical administrator for mastodon.social & mastodon.online (and oisaur.com :oisaur:) #mastoadmin

Also […]

🌉 bridged from ⁂ https://oisaur.com/@renchap, follow @ap.brid.gy to interact
@darius if you want to stick with nginx, try https://nginx.org/en/docs/http/ngx_http_acme_module.html which will handle LE certificates directly within nginx. Caddy or Apache do the same if you can/want to change your web server.
As do monitoring, updown.io does check certs and emails you if […]
Original post on oisaur.com
oisaur.com
December 27, 2025 at 9:42 AM
@spiezmaestro Ok. The rollback to the immediately earlier version should not have any risks or problems, but I understand if you dont feel confident doing that.
We will try to figure out what is happening here, but we are not seeing it ourselves so it's a bit hard
December 15, 2025 at 5:18 PM
@spiezmaestro Could you try to rollback to Mastodon 4.5.3 and see if this still occurs? That would help us confirm the problem comes from the code, as there may be other explanations.
Thanks!
December 15, 2025 at 5:04 PM
@underscorner This is not about cache. The key is there to ensure that nobody is impersonating your account. If the key change and cant be verified using the old key, then this may be someone impersonating you. This is how ActivityPub works.

Otherwise someone could take over a domain name and […]
Original post on oisaur.com
oisaur.com
December 10, 2025 at 8:50 PM
@underscorner Remote servers will not update to a new key that cant be confirmed by the old key, by design. Servers who know the old key wont accept a random new key.

@Gargron
December 10, 2025 at 8:44 PM
@michael that’s high in my priorities list, and I hope we can get to it in one of the next releases 🤞
December 10, 2025 at 8:11 PM
@underscorner unfortunately, any account exiting previously will not be usable anymore as other servers who knew about it will have the old key.

@Gargron
December 10, 2025 at 7:49 PM
Reposted by Renaud Chaput
Today we are calling on institutions around the world to take control of their #digitalsovereignty, including their social accounts. Governments should communicate directly with their citizens on open platforms, not through the mouthpiece of a corporation […]
Original post on mastodon.social
mastodon.social
December 9, 2025 at 11:07 AM
@luppano IFTAS c’est legit, et ils font un gros boulot de détection et signalement d’acteurs malveillants. Tu peux contacter @jaz si besoin de détails je pense.
December 9, 2025 at 1:37 PM
@timbray @mastohost
is a great service for this!
@coop
December 9, 2025 at 1:51 PM