Is Mastodon Private and Secure? Let’s Take a Look (eff.org)

Funny enough, the fork used by infosec.exchange had a bug that allowed password stealing. https://portswigger.net/research/stealing-passwords-from-inf...