The upcoming "quote post" feature in Mastodon and other Fedi software can lead to DM leaks.
"DMs" were always "everyone that's mentioned via @ can read the message".
However, with the quoting feature, _linking_ to someone's post from a DM, even without mentioning them, may be interpreted as "quoting" their post by Mastodon. And if that user allows quotes, they will be notified of your (DM) post _and_ be able to read its content.
https://github.com/mastodon/mastodon/discussions/36685
scy
npub15p…khvce
2025-11-03 10:59:29 UTC
Author Public Key
npub15pc5vt5kqgr60g389gl4n5zzuktz8wezz76klym9ew3puy3p8clqckhvceSeen on
wss://relay.momostr.pinkPublished at
2025-11-03 10:59:29 UTCEvent JSON
{
"id": "f90d99b50a789a28c850b44daa6eda2eb024a0710f20be13509c4f040af26d01",
"pubkey": "a071462e960207a7a2272a3f59d042e59623bb2217b56f9365cba21e12213e3e",
"created_at": 1762167569,
"kind": 1,
"tags": [
[
"proxy",
"https://chaos.social/@scy/115485413808704979",
"web"
],
[
"proxy",
"https://chaos.social/users/scy/statuses/115485413808704979",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://chaos.social/users/scy/statuses/115485413808704979",
"pink.momostr"
],
[
"-"
]
],
"content": "The upcoming \"quote post\" feature in Mastodon and other Fedi software can lead to DM leaks.\n\n\"DMs\" were always \"everyone that's mentioned via @ can read the message\".\n\nHowever, with the quoting feature, _linking_ to someone's post from a DM, even without mentioning them, may be interpreted as \"quoting\" their post by Mastodon. And if that user allows quotes, they will be notified of your (DM) post _and_ be able to read its content.\n\nhttps://github.com/mastodon/mastodon/discussions/36685",
"sig": "2ad25b8fd7019393ae374ccfecab9938f53f00aa7f75dcf7d1d497185af3ecef1d6c210b073b635ea805a9360d79d958f34b30053c1a476d6c99d77c5d146ebd"
}