3 ms·
This is definitely a primary problem with Mastodon and other fediverse software. However, I will mention there is a problem with the idea of fetching replies fr
by chrisnight 3y ago
This is definitely a primary problem with Mastodon and other fediverse software. However, I will mention there is a problem with the idea of fetching replies from the parent post’s home server that makes it hard to solve.
The primary idea being that a user trusts their home instance, but don’t necessarily trust other instances.
If you fetch replies from another server, you are trusting that server to send you real, valid replies, from other servers. You could verify the replies, but this would be an expensive operation to do automatically.
As such, a malicious server could create phantom replies that don’t actually exist, and your trusted, home server would serve these to you. Currently, your home server only shows likes and replies it can validate (it heard it from the server that did it), but once you trust another server, you add a unnecessary middle man for some extra convenience