Replying to:

@wojtek.vivaldi.net.ap.brid.gy Yeah, it’s just security by obscurity, by design. To make some people shut up, to put it bluntly… Logged in to bsky.app, since it’s only checked at the level of the client looking at JSON responses.

Private data will be possible, see here for some plans: pfrazee.leaflet.pub/3lzhmtognls2q

Kuba Suder @mackuba