We're phasing OStatus out of Mastodon (we've supported it 2 years longer than we've used it) which removes a lot of cognitive load from further development of features and maintenance #mastodev
There is a new optional feature in the master branch called authorized-fetch mode, which requires all fetches of ActivityPub resources to be signed, which in turn allows to reject fetches from domain-blocked servers.
Enabling this right now is not a great idea because current Mastodon versions don't sign all requests, so some functions would be impacted, a slow roll-out is advised #mastodev
@Gargron I assume even with this enabled public posts can not be viewed by anyone running something other than mastodon? Or does it not effect public posts and one effects posts you share friends-only?
As always thanks for your hard work.
@freemo Public posts will remain viewable in the browser
@Gargron Cool, so its really just a way to make the followers-only posts actually enforcable. Makes sense.
This also means it wont work with anything but mastodon servers right? Its not ActivityPub standard compliant I presume?