@petrescatraian @nutomic I think followers-only posts on Mastodon are closest. Make that your default posting mode and require approval for followers and it's effectively a private profile. (Again, barring malicious ActivityPub servers)

[–] petrescatraian@libranet.de 1 points 2 years ago (4 children)

@KelsonV So you're saying that anything you post can be visible for any AP server, basically?
@nutomic

[–] KelsonV@wandering.shop 2 points 2 years ago (2 children)

@petrescatraian @nutomic To some extent.

When you mark a message as followers only, your server only sends it to your followers, and only shows it to your followers who are logged in

But if one of your followers is on a malicious (or buggy) server, there's nothing stopping *that* server from doing something it's not supposed to with the data.

IIRC it was CloudFlare's implementation that recently had to fix a bug where followers-only posts were being shown publicly.

[–] KelsonV@wandering.shop 2 points 2 years ago (1 children)

@petrescatraian @nutomic That still requires your server to send the message to the buggy or malicious server, so Meta or whoever couldn't just set up a random server and ask for the posts, they'd have to have a user following you first, or you'd have to mention someone on that server in your post.

[–] petrescatraian@libranet.de 0 points 2 years ago

@KelsonV I see. So this might actually be a good thing, as they are publicly allowing anyone to use such a server to their own benefit, haha 😁
@nutomic

[–] petrescatraian@libranet.de 1 points 2 years ago

@KelsonV That makes sense

@nutomic

load more comments (1 replies)

load more comments (3 replies)