Hello !

When someone connects to my instances communities, but from another instance, how do I know it’s no spoofing involved?

Cheers

  • Wander@yiffit.net
    link
    fedilink
    arrow-up
    0
    ·
    1 year ago

    Messages are sent with a digital signature that only the original instance could craft.

    • Loulou@lemmy.mindoki.comOP
      link
      fedilink
      arrow-up
      0
      ·
      edit-2
      1 year ago

      Okay so it’s the lemmt server running my instance that checks it is the right user. Do you know how it is done ?

      I reread your post, so it’s a signature in the http call?

      • 1984@lemmy.today
        link
        fedilink
        arrow-up
        0
        arrow-down
        1
        ·
        1 year ago

        It’s a https certificate connected to the domain name of the instance.