https://lhero.org/portfolio/lh-site-privacy/ Digital Sovereignty for everyone Thu, 22 Oct 2026 03:09:06 +0000 hourly 1 https://lhero.org/portfolio/lh-site-privacy/#comment-1537637 Thu, 22 Oct 2026 03:09:06 +0000 https://lhero.org/?post_type=lh-portfolio&p=150399#comment-1537637 Shorter MCP ability description. The opening sentence of get-privacy now says what the ability returns in under 70 characters, because discover-abilities lists only that sentence. The list of fields follows unchanged in the next sentence. Wording only: no change to behaviour, inputs or outputs.

]]> https://lhero.org/portfolio/lh-site-privacy/#comment-1537622 Thu, 22 Oct 2026 00:36:49 +0000 https://lhero.org/?post_type=lh-portfolio&p=150399#comment-1537622 Mastodon apps can now sign in to private sites when Enable Mastodon Apps is active. The gate refused the requests a Mastodon client makes before it has logged in, so no app could connect to a private site. Instance and nodeinfo discovery, app registration, Enable Mastodon Apps’ own diagnostic check and token revocation are now let through. These are the same routes logged-out visitors can reach on public sites, and none return posts or members. Signing in still needs someone with access to the site: the authorize page sends visitors to log in first and refuses anyone without access. Timelines, accounts and posts stay private. The list of routes can be changed with the new lh_site_privacy_return_mastodon_signin_routes filter.

]]>