Is the state of Mastodon (and most of the fediverse?) such that user/message signing keys are still all RSA?

Is the state of Mastodon (and most of the fediverse?) such that user/message signing keys are still all RSA? I've seen there's been some discussion of Ed25519 support, but it seems like not much progress?

#ActivityPub #Mastodon #Questions

@swetland

What there is would seem to be here:

"Security

Public key cryptography and supported signature schemes over HTTP and JSON-LD."

That said, I can offer no support or explanation

Here: https://docs.joinmastodon.org/spec/security/

#ActivityPub #Mastodon #Questions #PublicKeys

@swetland

Also, this at Github:

"Update HTTP signatures to support IETF draft from October 2021 # 21429"

Here: https://github.com/mastodon/mastodon/issues/21429

#ActivityPub #Mastodon #Questions #PublicKeys

@swetland FEP-8b32 implementations use Ed25519:

Cookie monster!

(codeberg.org)

But for HTTP signatures everyone still uses RSA because dominant implementations don't support Ed25519