this post was submitted on 17 Feb 2024
72 points (97.4% liked)

Lemmy

11947 readers
1 users here now

Everything about Lemmy; bugs, gripes, praises, and advocacy.

For discussion about the lemmy.ml instance, go to !meta@lemmy.ml.

founded 4 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] maegul@lemmy.ml 9 points 7 months ago (1 children)

Awesome to see!

Can't help but think that there's gotta be a relatively straight forward to hack this over ActivityPub though? I'm not over whatever security there is in the protocol, so that likely does not mean much at all.

But how hard would it be for a server to convince a normal lemmy instance that it is doing all the right things in terms of following/subscribing to a private community when it's actually displaying it publicly?

For that reason I wouldn't be surprised if some would prefer, for the sake of caution, to run a private community in local only mode too. Not that a federated private community isn't useful ... it totally is, even if there is a risk.

[–] shrugal@lemm.ee 12 points 7 months ago* (last edited 7 months ago) (1 children)

That's just the nature of giving someone access to private content though. Even a single user could mirror everything to a public space and completely ruin everyone's day. You just have to take into account that you're giving access to the user AND the instance admin when approving a request, and that you trust them to do the right thing.

[–] maegul@lemmy.ml 3 points 7 months ago

Yea. Hopefully people will be aware of that.

If combined with a local only instance, then you’d have fewer concerns though, which is near as the feature is coming already.