@newt @alex @moth And nothing of that caliber would fix the signed fetch since even if some cunt implements IP checks for incoming request, nothing would stop me from setting up a decoy instance together with a proxy that'll be used by my actual instance for egress federation. Pulse it'll break thousands of instances running behind cloudflare or other reverse proxies.