Gregory's ServerThe "sign-in token" authentication scheme, where you had to enter a code from an e-mail if logging in from a new IP address, created too many issues, so in 3.5.1 we're going back on it. Instead, you'll just get an e-mail about a new sign-in if it's from a new IP address.
Eugen Rochko
9 comments
Eugen Rochko
We're also bringing back e-mail notifications for mentions and follows being on by default, but now we won't send an e-mail if you already have an app that gets push notifications or you're connected to the web app.
Eugen Rochko
We also fixed the issue with login over Tor when Mastodon is being run as an Onion service without https (https is not needed for Onion services). This affected primarily login through our iOS app / Safari / Orbot. 
Deadly Headshot
@Gargron ... Does federation work through Tor? Also, doesn't activitypub need SSL to do its work?
Eugen Rochko
@dheadshot This is about Mastodon servers offering user access as an Onion service, not federation through Tor. That is theoretically possible but not explored. |
@Gargron Thank you!