

One example is HTTP signatures.
Why is it the first time I hear of this?

Ah, because it’s apparently a fresh proposal, perhaps from Mastodon themselves.
Y u no Mamaleek


One example is HTTP signatures.
Why is it the first time I hear of this?

Ah, because it’s apparently a fresh proposal, perhaps from Mastodon themselves.


As they aren’t running in tor or i2p they can’t send you stuff.
A server can run on both the clearnet and darknet simultaneously, but indeed I don’t think that works that well if the server name is the identifier for an instance — since it would be different between the networks.


The server to server protocol has a bunch of assumptions that are not true for tor and i2p.
Could you please elaborate just a bit? I’m a web dev, but haven’t looked into fediverse protocols yet.


I didn’t know it was possible to anonymise an entire instance
I mean, that works pretty much like any server on the web, now that most communication is done via http. However, websockets, http/2 and /3 might break, I guess, when they expect a continuous connection.
(Dunno which underlying protocols Lemmy uses, so can’t guarantee that it’s really that easy.)


APIs should work, though. So unless the instance needs some kinda captcha or other client-side challenge, e.g. for registration, people could presumably use apps with it.
Plus, if the aim is just to reach and use the instances, and not to be anonymous, then one could probably use a regular browser with a Tor proxy (Firefox can do it per site with both proxy-switching extensions and containers). Assuming that domain resolution would work.
However, in my experience, not many social-media-adjacent apps support setting a custom proxy, even though modern network libraries should make it a no-brainer. E.g. few Matrix clients support that, and ones that do aren’t much of an eye candy (and have problems with the initial setup of the encryption, which seems to be a pervasive issue with Matrix).


That’s understandable, but the result is what it is. Plus, native apps seem to have built-in remedy for being kicked out of the memory, in that the stack of activities is remembered and the input is kept, so after a brief loading screen I’m back to where I was and can back out through the previous screens too. Voyager should probably explicitly implement something like this.
could be one of those cases where the product predates ai
It does afaik, was around for some years while the AI usecase is very recent.
The helpfully named site AlternativeTo is good for such questions. It’s populated by users and served me well over the years.
IFTTT and Zapier are the primary non-self-hosted alternatives, both have been around for ages and have lots of available integrations.
Node-RED and Huginn are the self-hosted alternatives. Huginn is older than both n8n and Node-RED, afaik, and seems to be primarily focused on online queries like updates to a webpage.
In the end I haven’t used any of the self-hosted ones, since I’m more of a code guy, so can’t say if one is better than another for anything.


There’s a problem that it seems to use a lot of memory, because it’s a web browser in disguise. As a consequence, any time another app needs memory, Voyager is killed by Android and starts again from the main page, forgetting what I was doing. Oftentimes it’s enough to switch to the actual browser and back again for Voyager to restart, which is ironic for a link-aggregator app.
Its animations are janky for the same reason, and get in the way of some functionality like collapsing comments.
Voyager’s UI is great, mainly because it’s not flashy, but a native app with that UI would be a lot better. RedReader for Reddit is much smoother to use.


The deterrent might work temporarily until the challenge pattern is recognised, but there’s no actual protection here, just obscurity.
Anubis uses a proof-of-work challenge to ensure that clients are using a modern browser and are able to calculate SHA-256 checksums. Anubis has a customizable difficulty for this proof-of-work challenge, but defaults to 5 leading zeroes.
Please tell me how you’re gonna un-obscure a proof-of-work challenge requiring calculation of hashes.
And since the challenge is adjustable, you can make it take as long as you want.
KeePass also supports merging new entries from a database. Helpful for paranoiacs like me, who don’t let any other program touch the database, but are too lazy to not add an entry on the phone occasionally.