<![CDATA[Catodon 26.10.2 released:  Stop trusting the emSign ECC Root CA - G3 root at startup]]>Security release - please update. 26.10.2 is a security release on top of 26.10.1 and contains nothing else. Every instance should update.

​​

]]>https://forum.pierobosio.it/topic/e99b5099-7388-46e2-ba70-c173dd77eb41/catodon-26.10.2-released-stop-trusting-the-emsign-ecc-root-ca-g3-root-at-startupRSS for NodeSat, 24 Oct 2026 10:04:01 GMTWed, 21 Oct 2026 11:49:32 GMT60<![CDATA[Reply to Catodon 26.10.2 released:  Stop trusting the emSign ECC Root CA - G3 root at startup on Thu, 22 Oct 2026 07:30:35 GMT]]>Thanks - if I'm not mistaken, this needs nodebb-plugin-link-preview, which isn't on by default in fresh installs. Without it the link didn't show anywhere, which led to my initial frustration (it's probably documented and I missed it). The fix is merged and deployed: new forum posts no longer send a url and carry the link only as a Link attachment, like Lemmy's do. Posts that were already federated keep the old url.

]]>https://forum.pierobosio.it/post/https://catodon.rocks/notes/asmscxsaudvj000lhttps://forum.pierobosio.it/post/https://catodon.rocks/notes/asmscxsaudvj000lThu, 22 Oct 2026 07:30:35 GMT<![CDATA[Reply to Catodon 26.10.2 released:  Stop trusting the emSign ECC Root CA - G3 root at startup on Thu, 22 Oct 2026 00:55:15 GMT]]>@lnkr@staging3.plamenu.com @panos@catodon.rocks no this doesn't seem right.

NodeBB does not handle url that way, it always represents the user friendly URL that a browser can access.

The specific case you're referring to is a threadiverse post with a link target. In that case the shape is attachment with type Link. NodeBB checks for that and appends it to the post body.

]]>https://forum.pierobosio.it/post/https://activitypub.space/post/2560https://forum.pierobosio.it/post/https://activitypub.space/post/2560Thu, 22 Oct 2026 00:55:15 GMT<![CDATA[Reply to Catodon 26.10.2 released:  Stop trusting the emSign ECC Root CA - G3 root at startup on Wed, 21 Oct 2026 13:18:40 GMT]]>@panos@catodon.rocks @catodon-talks@catodon.rocks @julian@activitypub.space
wait, that can't be right. Lemmy does not do that, it doesn't have the top-level url in post AP object at all, neither I ever had this issue with Lemmy linkposts and I can't reproduce it now, it's original post url resolves correctly, even on Mastodon.
And NodeBB source at least gives the impression that it can pull the href from attachments?

]]>https://forum.pierobosio.it/post/https://staging3.plamenu.com/users/lnkr/statuses/117479094358835200https://forum.pierobosio.it/post/https://staging3.plamenu.com/users/lnkr/statuses/117479094358835200Wed, 21 Oct 2026 13:18:40 GMT<![CDATA[Reply to Catodon 26.10.2 released:  Stop trusting the emSign ECC Root CA - G3 root at startup on Wed, 21 Oct 2026 12:31:14 GMT]]>Yeah, actually it's on purpose, with this known downside. For link posts in our forums, we put the link in the post's url field, the same way Lemmy does. We did this as a compromise, because otherwise NodeBB wouldn't show the link. The side effect is that Mastodon-style apps treat url as the post's own address. "Open original page" then opens the link instead of the post on the Catodon server.

@julian@activitypub.space - hello! I have not checked if NodeBB has changed this since we implemented federated forums. if we send url as a list, with the post's own address first and the link second, would NodeBB still show the link? We also send the link as a Link attachment. Ideally, we would like to keep NodeBB working and fix Mastodon too.

]]>https://forum.pierobosio.it/post/https://catodon.rocks/notes/aslnnqnqvpi8003fhttps://forum.pierobosio.it/post/https://catodon.rocks/notes/aslnnqnqvpi8003fWed, 21 Oct 2026 12:31:14 GMT<![CDATA[Reply to Catodon 26.10.2 released:  Stop trusting the emSign ECC Root CA - G3 root at startup on Wed, 21 Oct 2026 12:13:26 GMT]]>@catodon@catodon.rocks @panos@catodon.rocks I just noticed that the link that's supposed to be the url of the original post is instead federated as the link from the post. Can't imagine this being intentional

]]>https://forum.pierobosio.it/post/https://staging3.plamenu.com/users/lnkr/statuses/117478837852372992https://forum.pierobosio.it/post/https://staging3.plamenu.com/users/lnkr/statuses/117478837852372992Wed, 21 Oct 2026 12:13:26 GMT