Closed
Description
Observed behavior
I am running an instance with federation enabled for posts. If someone has a blog that is Unlisted, and someone subscribes to that blog via ActivityPub, and then they set the blog to Private, posts that are made from then on will still be federated to other people.
This is also true for "Password-Protected". The full text of the article federates out to any subscribers.
Expected behavior
I would expect that federation would halt while Private, similar to how the RSS feed returns a 404 after you switch to Private.
Application configuration
- Multi-user mode
- sqlite
- Open registration
- Federation enabled
- Disabled http auth
- Multiple blogs per user
Version or last commit: latest develop
as of 3493921