2026-10-27 13:12 UTC
Why, Mastodon? Why?
Why are you forcing signed requests for all "Accept: application/json" HTTP requests of the actor URL? Rather than just actors that choose to be "private".
...
curl -H 'Accept: application/activity+json' @reiver@mastodon.social
{"error":"Request not signed"}
#ActivityPub #Mastodon
Replies (2)
-
@jenniferplusplus@hachyderm.io 2026-10-27 13:46
@reiver@mastodon.social to enforce blocks
-
@ClearlyClaire@mastodon.social 2026-10-27 14:03
@reiver@mastodon.social the main reason is this: https://github.com/mastodon/mastodon/pull/40283