RetroFed Forum
Your home away from modern life.
Images exposed to the Internet on private instances with federation disabled?
Post Reply
AuthorMessage
kryoseu lemmy.ml kryoseu@lemmy.ml
Joined: 2026-03-16
(edited) Quote

Is this expected behavior?

Prior to enabling "Private Instance" and disabling "Federation enabled" settings, user profiles were also publicly accessible at https://<instance-url>/u/kryoseu.

Making the instance private and disabling federation made profiles inaccessible without authentication. However images are still exposed.

7   Original
kryoseu lemmy.ml kryoseu@lemmy.ml
Joined: 2026-03-16
#2 · (edited) Quote Reply

If I'm reading lemmy/issues/5763 right I guess this is intended behavior, which doesn't make sense imo.

2
kryoseu lemmy.ml kryoseu@lemmy.ml
Joined: 2026-03-16
#3 · Quote Reply

https://github.com/LemmyNet/lemmy/issues/6439

2
Björn swg-empire.de bjoern_tantau@swg-empire.de
Joined: 2023-07-08
#4 · Quote Reply

https://github.com/LemmyNet/lemmy/issues/6439

I knew this sounded familiar! https://github.com/LemmyNet/lemmy/issues/5763#issuecomment-2959296044

1
Post Reply
Back to top