Can't help but think that there's gotta be a relatively straight forward to hack this over ActivityPub though? I'm not over whatever security there is in the protocol, so that likely does not mean much at all.
But how hard would it be for a server to convince a normal lemmy instance that it is doing all the right things in terms of following/subscribing to a private community when it's actually displaying it publicly?
For that reason I wouldn't be surprised if some would prefer, for the sake of caution, to run a private community in local only mode too. Not that a federated private community isn't useful ... it totally is, even if there is a risk.
Awesome to see!
Can't help but think that there's gotta be a relatively straight forward to hack this over ActivityPub though? I'm not over whatever security there is in the protocol, so that likely does not mean much at all.
But how hard would it be for a server to convince a normal lemmy instance that it is doing all the right things in terms of following/subscribing to a private community when it's actually displaying it publicly?
For that reason I wouldn't be surprised if some would prefer, for the sake of caution, to run a private community in local only mode too. Not that a federated private community isn't useful ... it totally is, even if there is a risk.