UI possibly leading to unexpected security/trust issues when answering Private Message
Answer to PM is not PM when using the comment box.
Instead PM, which is expected, it creates message visible for all followers.
Example 1: ZOT connections
(using here publicly because the message was sent to public groups where was repeated)
Message shows envelope icon (saying Private Message) when clicked "Visible to specific connections"
In fact it is not PM but limited audience post, and somebody else is answering to my PM! If that would be multiple PMs sent, the other recipients answer should be visible only to the sender, but when answering Hubzilla creates message visible to others (followers or recipients of other PMs).
Example 2: ActivityPub
When answering PM from AP contact received with envelope icon (Private message) by comment box, AP contact does not receive PM but "followers only" message and no notification. (Image above taken from Zap message, where the difference is just Zap makes a notification in Mastodon, Hubzilla does not)
AP contact is missing the DM:
- you did reply indeed and your message shows up in my DM threads,
- but it's nowhere to be found in the notification streams (and why I missed it! sorry...)
- and your message is not understood by masto as a DM but is listed instead as a regular toot sent to subscriber only
My theory is that maybe Hubzilla has not implemented AP DM yet, ...
When manually tagging the sender in reply (@...) the PM is created.