Authorized Fetch (also referred to as Secure Mode in Mastodon) was recently circumvented by a stupidly easy solution: just sign your fetch requests with some other domain name.

you are viewing a single comment's thread
view the rest of the comments

[–] PeriodicallyPedantic@lemmy.ca 46 points 11 months ago (24 children)

I'm kind of tired of social networks offering even the pretense of privacy. Just loudly proclaim that everything is public but clients can filter out shit you don't wanna see.

[–] ada@lemmy.blahaj.zone 31 points 11 months ago (23 children)

That doesn't work for vulnerable minorities. Manually filtering each shitty person after you step in their shit gets old. Coupled with the fact that not shutting down shitty people just means more shitty people are likely to turn up.

It's not sustainable

[–] sugarfree@lemmy.world 7 points 11 months ago (1 children)

A private forum may be useful in that case.

[–] ada@lemmy.blahaj.zone 1 points 11 months ago

Why even bother with that comment?

load more comments (21 replies)