@stefan I’d guess they are using the domain of the the HTTP Signature key ID or signing entity (and requiring authorized fetch). Given the server knows the requesting domain, it’s easy to generate server-specific content.
@stefan oh that was someone else probably suggesting that as an idea? But yeah my c.im definitely showed and I was looking at all the baffled comments beneath it 🤣😂🤣
@stefan Can't you just send a different object depending on which AP server makes the request?
E.g. chaos.social requests the status -> it responds with a message containing chaos.social.
@stefan that was not intentional, in fact at one stage it was expressly against the cards policy, but towards the end it was no longer enforced. Riley, but could be fun.
@stefan It's a custom ActivityPup server that returns different results based on which instance requests that specific toot, or to which instance the activity is sent.
Add comment