- cross-posted to:
- privacy@lemmy.ml
- cross-posted to:
- privacy@lemmy.ml
Authorized Fetch (also referred to as Secure Mode in Mastodon) was recently circumvented by a stupidly easy solution: just sign your fetch requests with some other domain name.
Authorized Fetch (also referred to as Secure Mode in Mastodon) was recently circumvented by a stupidly easy solution: just sign your fetch requests with some other domain name.
Except that I get the vibes from the Matrix community that the shit UX is part of the attraction because it does a wonderful job of gatekeeping.
I don’t hold out much hope for Matrix working out ever, but perhaps someday someone will use it as inspiration for making something that doesn’t suck.
Matrix is the protocol. You can have whatever client you like. There are mobile apps that are similar to discord and connect to matrix servers.