Conversation

Notices

1. Embed this notice
   Evan Prodromou (evan@cosocial.ca)'s status on Thursday, 29-Feb-2024 12:55:39 JST Evan Prodromou

   • Aurynn Shaw
   • Paul Chambers

   @paul @aurynn Do you have "authorized fetch" enabled? Otherwise, blocking a domain doesn't keep them from fetching your API data anonymously.

   • Embed this notice
     Evan Prodromou (evan@cosocial.ca)'s status on Friday, 01-Mar-2024 08:39:17 JST Evan Prodromou

     in reply to

     • Aurynn Shaw
     • Paul Chambers
     • bkil

     @bkil @aurynn @paul I'm trying to remain open to being taught about ActivityPub.

     It's not required to sign requests, though.

   • Embed this notice
     bkil (bkil@nerdica.net)'s status on Friday, 01-Mar-2024 08:39:29 JST bkil

     in reply to

     • Aurynn Shaw
     • Paul Chambers
     @evan @paul @aurynn The CN.net instance is supposed to sign its S2S API requests (i.e., it shouldn't appear to be anonymous other than due to bugs).