• zeograd@lemmy.world
    link
    fedilink
    arrow-up
    12
    ·
    4 months ago

    Thanks for your efforts! The only sound conclusions on their side would be to shut off unauthenticated endpoints returning valuable data.

    • KairuByte@lemmy.dbzer0.com
      link
      fedilink
      arrow-up
      2
      ·
      4 months ago

      That would kneecap public access to anything. Their API is what runs their site, requiring auth for everything would essentially break Reddit for anyone not logged in.

      That would kill new accounts. No one would know what was being talked about before onboarding, but without that information, what would their motivation be for onboarding?