There seems to be no UI for it in the official mastodon code, but yes it's just one database lookup away (or a list of database lookups).
I mean it's a common thing to not have end-to-end encryption. Gmail, Instagram, Discord, all can read DMs of logged in users.
Something being open source doesn't mean it's end to end encrypted.
Only some messengers have end to end encryption, like WhatsApp, Threema, Signal, etc. There are plans for mastodon to get E2EE as well, there is some backend work done but it seems to not be used in the mobile apps yet.
Your content is in the admin's database. You basically just have to trust that the admin has no reason and incentive to read your DMs, edit your toots and so on.
Comments
Is it true that admins have access to DM's?
There seems to be no UI for it in the official mastodon code, but yes it's just one database lookup away (or a list of database lookups).
I mean it's a common thing to not have end-to-end encryption. Gmail, Instagram, Discord, all can read DMs of logged in users.
Something being open source doesn't mean it's end to end encrypted.
Only some messengers have end to end encryption, like WhatsApp, Threema, Signal, etc. There are plans for mastodon to get E2EE as well, there is some backend work done but it seems to not be used in the mobile apps yet.
Your content is in the admin's database. You basically just have to trust that the admin has no reason and incentive to read your DMs, edit your toots and so on.