Private posts is something I’d like to have too. In WP it is possible, by having posts you need a login for. Finding a way to smooth that, which doesn’t require me to have other people having an account here, would be great. Automating IndieAuth access looks like a viable path.
However, private posts is just a first step in my mind. On my wish list is a deeper form of allowing selective publishing: private elements in otherwise public postings. Where one site visitor might read ‘my daughter’, friend might read her name. Where other read ‘a client’, colleagues would read the organisation’s name. Building a smooth spectrum from fully public to fully private. Along the lines of how we in conversations also continuously switch between different degrees of disclosure, and not just between conversations.
I have always been against the very idea of private posts, since that gives the false feeling of privacy. Nothing you post on the Internet is private (or, rather, stays that way for a long enough period of time), because there’s no way you can enforce that privacy. Hacks, leaks, and security flows aside, your private post staying private very much depends on the good will of those you shared it with (i.e. not taking a screenshot and posting it to reddit or elsewhere — you’ve got the drift).
Your brilliant idea of private elements could, on one hand, have just made me reconsider my position. It does indeed sound cool. On the other hand, however, the more seamless it is (and seamless is what’s actually cool about it), the more prone private information in your post is to inadvertently be made public by the readers who didn’t understand that some parts of what they were seeing was for their eyes only.