Hacker News Reader

> Your Direct Messages. We store and process your direct messages in order to enable you to communicate directly and privately with other users on the Bluesky App. These are unencrypted and can be accessed for Trust and Safety purposes.

Your private DMs being unencrypted means that they are semi-private DMs. E2E should be enforced everywhere.

View on HN

Different contexts have different threat models. If my goal is to have a secure, private conversation with someone, I'll use Signal. If my goal is to communicate some less-than-sensitive information with someone, but the content isn't relevant to anybody else, then an unencrypted DM is fine.

In the context of public-broadcast social media, the service's ability to moderate abusive uses of a DM system is probably more important to me than the ability to have absolute control over who reads my messages.

They are working on private repo data, Direct Messages were a hack job added in a hurry. It was one of the things people would hound the developers about any time they posted about anything.

Also, "private DMs" would more accurately be called PMs.

Reply on news.ycombinator.com