User avatar
Spring Jo 🥚 v_enby 🍀 @ShadowJonathan@tech.lgbt
2y
:techlgbt: enabling auth_fetch :boosts_ok_gay:​ Alright, we have just enabled auth_fetch on tech.lgbt.

If anyone is aware of issues occurring with fetching posts, please reply to this post, or mail us at mods@tech.lgbt, so that we're aware of any breakages.
⭐1
9
2
0
1
User avatar
Spring Jo 🥚 v_enby 🍀 @ShadowJonathan@tech.lgbt
2y
re: :techlgbt: enabling auth_fetch :boosts_ok_gay:​ Authorised Fetch essentially requires servers to authenticate themselves by their public key, domain, and whatnot, when they request posts from servers.

Previously, servers could just remove their signature, and mastodon would unambiguously give it to them, but now it is required to sign stuff, so that blocked servers cant skirt it anymore, and any other actor would essentially have to set up a server and domain in full to allow fetching posts.

---

Edit: A more simplified explanation here;
basically, whereas previously you didnt have to say your name at the door when you knocked it, now you do, before they'd let you in
so sus people (servers) could just not say their name, and still get data on our users here, but now they cant
⭐1
5
0
0
1
User avatar
who the hell is duc? ​:enbyfied:​ ​:verifiedcat:​ @duc@miau.jeder.pl
2y
re: :techlgbt: enabling auth_fetch :boosts_ok_gay:​ @ShadowJonathan honestly, more mastodon servers need to do this, then maybe more fedi projects will implement it properly (see lemmy or kbin)
⭐3
0
0
0
3