@tokyo_0 But how can the instance know if you're logged into another instance? Even without the issue of cross-site cookies, it can't possibly scan every domain... (Accessing a remote post inside your instance is a different matter, as that is similar to a proxy.) So it may be necessary to block web access entirely for everyone other than local users.