Authorized Fetch (also referred to as Secure Mode in Mastodon) was recently circumvented by a stupidly easy solution: just sign your fetch requests with some other domain name.

you are viewing a single comment's thread
view the rest of the comments

[–] ada@lemmy.blahaj.zone 15 points 11 months ago (14 children)

It's not as black and white as you make it. The options aren't "perfect security" and "no security".

The option that most people that experience regular harassment want is "enough security to minimise the shit we have to deal with to a level that is manageable even if it's imperfect"

[–] PeriodicallyPedantic@lemmy.ca 5 points 11 months ago (13 children)

While you're theoretically right, we've seen in practice that nobody really offers even the imperfect privacy you describe, and on decentralized systems it only becomes harder to solve.

A Facebook style centralized network where you explicitly grant access to every single person who can see your content - is as close as we can get. But nobody is trying to make that kind of social network anymore, because there isn't much demand for it.

If you want a soapbox (Twitter/mastodon/bluesky, Reddit/Lemmy/kbin, Instagram/pixelfed, YouTube/toktok/peertube) then privacy is going to be a dream, especially if decentralized.

[–] ada@lemmy.blahaj.zone 3 points 11 months ago (12 children)

Vulnerable folk are looking for community, not a soap box. The goal is to connect with other folk whilst being as free as possible from harassment.

It's absolutely possible to achieve that without perfect privacy controls.

[–] cupcakezealot@lemmy.blahaj.zone 4 points 11 months ago

reasons why i love blahaj.zone 🥹

load more comments (11 replies)