all atproto server-side apps/services: you are affected.
- pds: service proxying is outbound tls requests
- firehose consumers: tls to relays/jetstream
- relays etc: tls to pdses, plc
- identity resolution: tls to plc and did:web hosts
- etc
if you only ship code to the browser, you are ok.
RE: https://bsky.app/profile/did:plc:x2nsupeeo52oznrmplwapppl/post/3myctk2uu4c2z
fig (aka:[phil])
npub17y…sgwt8
2026-10-20 15:37:15 UTC
Author Public Key
npub17yfwkvcdfa2k5n7pyqpdcjdmtgdy62srw5v9wm2xffpsvakjgj6s5sgwt8Seen on
wss://relay.momostr.pinkPublished at
2026-10-20 15:37:15 UTCEvent JSON
{
"id": "a12cdc8cdf510b8e40d9df2538e5b722fade86e6a6b135667c5e9ddadb2078c0",
"pubkey": "f112eb330d4f556a4fc12002dc49bb5a1a4d2a037518576d464a430676d244b5",
"created_at": 1792510635,
"kind": 1,
"tags": [
[
"proxy",
"https://bsky.brid.gy/r/https://bsky.app/profile/did:plc:hdhoaan3xa3jiuq4fg4mefid/post/3mycxnv43y22t",
"web"
],
[
"proxy",
"https://bsky.brid.gy/convert/ap/at://did:plc:hdhoaan3xa3jiuq4fg4mefid/app.bsky.feed.post/3mycxnv43y22t",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://bsky.brid.gy/convert/ap/at://did:plc:hdhoaan3xa3jiuq4fg4mefid/app.bsky.feed.post/3mycxnv43y22t",
"pink.momostr"
],
[
"-"
]
],
"content": "all atproto server-side apps/services: you are affected.\n\n- pds: service proxying is outbound tls requests\n- firehose consumers: tls to relays/jetstream\n- relays etc: tls to pdses, plc\n- identity resolution: tls to plc and did:web hosts\n- etc\n\nif you only ship code to the browser, you are ok.\n\nRE: https://bsky.app/profile/did:plc:x2nsupeeo52oznrmplwapppl/post/3myctk2uu4c2z",
"sig": "5d5ca5f6badc4b4606d515f5446d57e91cde696fa1488c5a3572cdeb2f04b84bec375e5b8a8c8118bd740a2153c454885819c1c58c96ab58378c6872376f2100"
}