[HN Gopher] What does authorized_fetch actually do?
       ___________________________________________________________________
        
       What does authorized_fetch actually do?
        
       Author : Kye
       Score  : 26 points
       Date   : 2023-07-11 23:54 UTC (3 days ago)
        
 (HTM) web link (hub.sunny.garden)
 (TXT) w3m dump (hub.sunny.garden)
        
       | ronsor wrote:
       | It would be ironic if Mastodon admins copied Elon Musk's Twitter
       | mismanagement by enabling those options.
        
       | rainonmoon wrote:
       | This is an interesting and highly relevant explainer, especially
       | given its prominence re: the whole Threads situation. I really
       | appreciate it being broken down like this because I think it's
       | pretty important for anyone invested in the fediverse to
       | understand its access controls. But I _really really_ appreciate
       | how they 've upfronted the date and version applicability in the
       | post. I'm sure everyone here understands the pain of researching
       | functionality of software with a long history and trying to
       | figure out the relevance of published information. This is a huge
       | help. If you write about software, please do this!
        
       | somebodythere wrote:
       | It's funny how Mastodon keeps crawling in the direction of more
       | balkanization.
        
       | ipaddr wrote:
       | If Medium server can see good servers content but not bad server.
       | Bad server can fetch medium server who follows good server.
       | What's the goal of hiding from bad server? Spam reduction?
        
       | tedunangst wrote:
       | This is mostly smoke, since it's trivial for the banned bad
       | server to fetch through a nondescript neutral server.
        
         | Kye wrote:
         | Bad actors will always find ways around anything. This is ideal
         | for keeping good actors with conflicting moderation policies
         | from picking up posts they shouldn't.
        
           | gizmo686 wrote:
           | Why is the server hosting the content responsible for
           | enforcing the moderation policy of the server requesting it?
        
           | tedunangst wrote:
           | Every well behaved server already puts their hostname in
           | user-agent when making a request. The requirement that they
           | also sign the request is just extra overhead.
        
       | 38 wrote:
       | people are going to get the content if they want it.
       | 
       | if you start requiring authentication for API access, then they
       | will just scrape the HTML, which will just put more of a strain
       | on your servers. best solution I have seen to this issue is just
       | allow anonymous requests, but rate limit them. but please dont go
       | idiotic like Instagram/Twitter, who rate limit in some cases to 9
       | posts a day.
        
       | ShadowBanThis01 wrote:
       | In what?
        
       ___________________________________________________________________
       (page generated 2023-07-15 23:01 UTC)