#mastodon experts, do i need an HTTPSignature to read (HTTP GET) activities from mastodon ?

[naturzukunft@mastodon.social]

#mastodon experts, do i need an HTTPSignature to read (HTTP GET) activities from mastodon ? E.g. a follow activity?

#activitypub #activitypubdev

[nick@norden.social]

@naturzukunft

Depends, in which mode the specific #Mastodon instance is running, if i remember this correctly.

[naturzukunft@mastodon.social]

@nick i found the error in my code. so in mastodon.social you don't need a HTTPSignature.
Thanks!

[naturzukunft@mastodon.social]

i get a

404 Not Found from GET https://activitypub.academy/f0e3711c-8085-4aaa-a3f2-92ea20ae8748

[naturzukunft@mastodon.social]

404 NOT_FOUND from GET https://activitypub.academy/f9de1418-fe13-4fe1-b4bf-ff0c4a69da94

[julian]

@[email protected] @[email protected] Nick is right, it depends on whether the Mastodon instance has authorized_fetch enabled, which enforces the HTTP Signature checking on GETs.

tech.lgbt is one instance that has it turned on, so you can use that for testing.

For me, I just sign everything, including GETs. The overhead is pretty minimal.