- cross-posted to:
- privacy
- fediverse@kbin.social
- fediverse
- cross-posted to:
- privacy
- fediverse@kbin.social
- fediverse
Authorized Fetch (also referred to as Secure Mode in Mastodon) was recently circumvented by a stupidly easy solution: just sign your fetch requests with some other domain name.
Sure, but this should not be seen on the same class of software of “social media” or even “the web”.