New #blog: Tightening #security control over #mastodon public #api endpoints

The concern in fediblock around @cloy's #fedisearch plans earlier in the week prompted me to put my #infosec hat on and look into ways to make it harder for external #scrapers to hit Mastodon's API feeds.

This post suggests a possible solution for concerned instance admins as well as details of some #crawlers I spotted.

https://www.bentasker.co.uk/posts/blog/security/restricting-unauthenticated-access-to-mastodons-public-feeds.html