<oembed><type>rich</type><version>1.0</version><title>Alex Gleason wrote</title><author_name>Alex Gleason (npub1q3…cd26p)</author_name><author_url>https://yabu.me/npub1q3sle0kvfsehgsuexttt3ugjd8xdklxfwwkh559wxckmzddywnws6cd26p</author_url><provider_name>njump</provider_name><provider_url>https://yabu.me</provider_url><html>Spent a few hours digging through Bluesky&#39;s labyrinthian source code. Abstractions on top of abstractions on top of abstractions...&#xA;&#xA;Anyway, they make it impossible to fetch profiles from any PDS or their mega &#34;relay&#34; without credentials. But oddly if you run your own PDS, you can somehow fetch profiles from their central servers without authentication... huh...&#xA;&#xA;So I finally figured out that api.bsky.app is their open domain.&#xA;&#xA;Eg, this one requires authentication:&#xA;&#xA;https://bsky.social/xrpc/app.bsky.actor.getProfile?actor=did%3Aplc%3Azhbjlbmir5dganqhueg7y4i3&#xA;&#xA;But this one does not:&#xA;&#xA;https://api.bsky.app/xrpc/app.bsky.actor.getProfile?actor=did%3Aplc%3Azhbjlbmir5dganqhueg7y4i3&#xA;&#xA;So... they realized they had a problem. In order to be decentralized, you have to allow public access. But instead of just allowing public access to their big mega service, they made a separate service just for PDS installations and then didn&#39;t advertise that fact.</html></oembed>