Should we turn on authorized fetch?
Without it on, "followers only" posts are visible to people who aren't logged on. It might do other checks. If you've tried to view toots on their original server and been told it isn't visible, it's that. If no one is opposed, I'll turn it on.
2
Replies
0
Boosts
"Authorized fetch" is now on. The setting says "Requiring authentication from federated servers enables stricter enforcement of both user-level and server-level blocks. However, this comes at the cost of a performance penalty, reduces the reach of your replies, and may introduce compatibility issues with some federated services. In addition, this will not prevent dedicated actors from fetching your public posts and accounts." This used to be part of .env.production but is now in the admin UI /
If there's a strong consensus to turn that back off again, we can do that. I'm just the janitor.
