EFF: "Is Mastodon Private and Secure? Let's Take a Look"

EFF analysis: "your posts and direct messages are accessible by those running the services." DMs are NOT end-to-end encrypted. Mastodon warns: "Posts on Mastodon are not end-to-end encrypted. Do not share any sensitive information." Data deletion across federated instances is technically difficult.