Authorized Fetch (also referred to as Secure Mode in Mastodon) was recently circumvented by a stupidly easy solution: just sign your fetch requests with some other domain name.

  • @linearchaos
    link
    English
    19 months ago

    Don’t worry, it’ll sort itself out when it becomes truly painful.