Title: whatwhere's Replies | WordPress.org --- # whatwhere [ ](https://wordpress.org/support/users/whatwhere/) * [Profile](https://wordpress.org/support/users/whatwhere/) * [Topics Started](https://wordpress.org/support/users/whatwhere/topics/) * [Replies Created](https://wordpress.org/support/users/whatwhere/replies/) * [Reviews Written](https://wordpress.org/support/users/whatwhere/reviews/) * [Topics Replied To](https://wordpress.org/support/users/whatwhere/replied-to/) * [Engagements](https://wordpress.org/support/users/whatwhere/engagements/) * [Favorites](https://wordpress.org/support/users/whatwhere/favorites/) Search replies: ## Forum Replies Created Viewing 5 replies - 1 through 5 (of 5 total) * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[ActivityPub] Follow activity reverts from ‘Unfollow’ to ‘Confirm Request’](https://wordpress.org/support/topic/follow-activity-reverts-from-unfollow-to-confirm-request/) * Thread Starter [whatwhere](https://wordpress.org/support/users/whatwhere/) * (@whatwhere) * [1 month, 2 weeks ago](https://wordpress.org/support/topic/follow-activity-reverts-from-unfollow-to-confirm-request/#post-18929225) * Thanks for investigating Matthias. The problem is that the social platforms ( e.g., mastodon, pixelfed) do not complete the follow. For example, I checked your mastodon.social profile and it does not show you following @signal-minus- noise@charlesbartlett.net[ ‘Hide Followers and Following on Profile is unchecked in the WordPress > Profile ] And mastodon.social displays, ‘This user has chosen to not make this information available’.I tried the same on Pixelfed with the same result. And that account is an orphaned follower now also.Given that you are following me (based on ActivityPub plugin Followers view), you should see a post I published less than 1 hour ago from @signal-minus-noise@charlesbartlett. net.As a reminder, my main federated profile (@cb@charlesbartlett.net) works fine with ActivityPub. It is a 2nd, new WordPress profile (role: Author), I created that is not working. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[ActivityPub] Follow activity reverts from ‘Unfollow’ to ‘Confirm Request’](https://wordpress.org/support/topic/follow-activity-reverts-from-unfollow-to-confirm-request/) * Thread Starter [whatwhere](https://wordpress.org/support/users/whatwhere/) * (@whatwhere) * [2 months ago](https://wordpress.org/support/topic/follow-activity-reverts-from-unfollow-to-confirm-request/#post-18918797) * No issues reported in Site Health for ActivityPub. Only one chron event issue related to the Friends plugin that was resolved with a plugin restart. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[ActivityPub] Enumerated author profile URLs blocked by web host](https://wordpress.org/support/topic/enumerated-author-profile-urls-blocked-by-web-host/) * Thread Starter [whatwhere](https://wordpress.org/support/users/whatwhere/) * (@whatwhere) * [5 months, 4 weeks ago](https://wordpress.org/support/topic/enumerated-author-profile-urls-blocked-by-web-host/#post-18800236) * Excellent, and thank you very much. I contacted Mastodon about the post, but I can see how they can not simply delete a post manually on their server when someone makes an unverified request. Deletion of the post would have to come via protocol. * _That may seem obvious, but it took me some time to understand that. So I’m mentioning it here for anyone new learning about how ActivityPub protocol and how it ‘should’ work._ * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[ActivityPub] Enumerated author profile URLs blocked by web host](https://wordpress.org/support/topic/enumerated-author-profile-urls-blocked-by-web-host/) * Thread Starter [whatwhere](https://wordpress.org/support/users/whatwhere/) * (@whatwhere) * [6 months ago](https://wordpress.org/support/topic/enumerated-author-profile-urls-blocked-by-web-host/#post-18797209) * Thanks [@pfefferle](https://wordpress.org/support/users/pfefferle/) for the clarification. Quick update… I’ve migrated to Pressable which fixed ALL of the site health issues related to ActivityPub. hooray! * However, I noticed that I have an “orphaned” post from 2 years ago when I view my federated profile through Mastodon.social. I had zero followers, so after the migration to Pressable, I uninstalled ActivityPub and Webfinger and waited 48 hours. My federated profile disappeared instantly from the Mastodon search results (although it remained in Pixelfed search results). * After reinstalling ActivityPub plugin (but not Webfinger), my federated profile appeared in Mastodon search results instantly. However, two issues remained: 1. I unfollowed my federated profile in Mastodon, but the federated profile still shows the follow.2. The orphaned test post still displays in Mastodon for anyone viewing my federated profile in Mastodon. (I say ‘orphaned’ post because that test post was deleted from my site. * In theory, should that post disappear over time? What is the expected result of the plugin and protocol? * [https://drive.google.com/file/d/1Sx_ibknkz86LBccZqj7pC38Zhb-OmRx0/view?usp=sharing](https://drive.google.com/file/d/1Sx_ibknkz86LBccZqj7pC38Zhb-OmRx0/view?usp=sharing) ( screenshot of orphaned post uploaded stored Google Drive) * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[ActivityPub] Enumerated author profile URLs blocked by web host](https://wordpress.org/support/topic/enumerated-author-profile-urls-blocked-by-web-host/) * Thread Starter [whatwhere](https://wordpress.org/support/users/whatwhere/) * (@whatwhere) * [6 months ago](https://wordpress.org/support/topic/enumerated-author-profile-urls-blocked-by-web-host/#post-18795398) * Hi [@pfefferle](https://wordpress.org/support/users/pfefferle/) , * Sorry for the confusion with the ‘Note’ at the end. That is simply pointing out that WP Engine claims to block enumerated author URLs for security reasons, which is legitimate. However, the regex pattern they configured in their server rule, actually ALLOWS enumerated author URLs IF you add a trailing forward slash. So it’s the worst of both worlds. They block ActivityPub, while at the same time allowing enumerated author URLs. (_ActivityPub plugin does not point to an enumerated author URL with a trailing slash, so the request is blocked… :-/ )_ * To be clear, that Note is more about warning other WP Engine customers who are looking at federating their author profile. I had plans to migrate to Pressable on renewal, but now I need to confirm how they handle this. * It begs the question, if enumerated author URLs are a known vector for malicious actors, albeit a minor security vulnerability, is there an alternative solution on the ActivityPub protocol roadmap? * I feel like this will hinder adoption because all big website hosts are likely to block enumerated author URLs. Viewing 5 replies - 1 through 5 (of 5 total)