{"p":"","h":{"iv":"ROXSYW+cfvEbFHu5","at":"ocxplSQjdRC3tXEtB/9/wg=="}}

(Technical issue, mainly for server admins)

There's a discussion going on on the Mastodon github about whether to remove noreferrer:

github.com/mastodon/mastodon/i

A number of people are concerned about the impact this would have on privacy, especially for smaller instances.

If you're concerned about this, you might want to voice your opinion.

7
Share
Share on Mastodon
Share on Twitter
Share on Facebook
Share on Linkedin
Jeff Moe

@feditips I run my own server and value privacy for everyone---so I don't use Github! #forgejo

0
2y

Yeah, I'm concerned by the idea of simply removing no-referrer. I tried to make the consequences clear. Thanks for the heas-up, @feditips

0
2y
Kevin Russell

@feditips Excellent notice. I am gratified and ameliorated that this discussion will be open and well attended.

Was told recently to butt out and let the betters decide for me/us, with insults.

0
2y
ophiocephalic 🐍

@feditips I don't have a github account to comment there but fwiw as a user I would strongly object to a forced referral value and consider it a turn against privacy on Mastodon. Leave our links alone!

0
2y
πŸ‡ΊπŸ‡¦ Murteza Yesil :unverified:

I am glad conversations like this one can take place and not some default forced onto its users like in centralized social media platforms.

My opinion on the topic: It should be on by default.
That being said, I would like to have it as an option exposed to users. But if it proves itself difficult to implement as a per-user setting, I would be fine with an instance wide setting left to admins as well.
@feditips

0
2y
Second Chance Bikes

@feditips

Hippocrates said it best: "first, do no harm."

I have been in the web development world since 1995, have watched a lot of crappy developments, as
social networking creates cultlike behavior, enables seriously bad actors to mindf*ck people.

I see no defensable reason to make this change. At all. Regardless of instance size.

Making it individual choice is just silly. The data are valuable to legitimate consumers of them only in the aggregate.
Just
Don't
Do
It.
Risk/reward says NO!

0
2y
Trevor Van As

@feditips As a website owner, I'm all for it. Even if it contains limited information, such as no referral path or simply saying "Mastodon" for the source. Something top level that can't be identified back to a user or partucal post.

For me, having it all lumped into "direct" is not helpful. I'd rather have a basic overview than none at all.

0
2y
Replies