Notices by Mike P (fentiger@mastodon.social)

@silverpill @steve Fair enough - but in that case I'd suggest linking to a description of the attacks, so that readers can judge the importance for themselves. It's very easy to overlook things like this if nobody's told you that they exist.

@silverpill @steve One suggestion: the content negotiation section should, IMHO, be phrased as a "MUST" level requirement, in the light of the attacks on Mastodon that were discovered at around the turn of the year. That is, senders MUST set the correct Content-Type, and receivers MUST reject any message without it set correctly.

At least, that's how I'm treating them now.

@silverpill I'm curious about the "publicly accessible feed" requirement. It's not at all clear to me what this means.

Will they refuse to federate with a site that's entirely hidden behind a login page?

Or a site that doesn't have a web front end at all, and only provides service via, say, mobile apps?

@jrashf https://socialhub.activitypub.rocks/t/fep-0837-federated-marketplace/3501 ?