合得安期不死药，使我蝉蜕尘埃间。 @zhouciyue@social.cleverlibre.org

mastodon跟pleroma的remote follow功能很方便，但是它有一个隐患，你要在「远端服务器」填写「你的账号id」，这样一来，远端服务器就有可能知道你的账号跟你的ip之间的相关性了。
mastodon and pleroma's remote follow functionality is convenient, but it has a vulnerability. You need to fill in "your account id" on "a remote server." This way, the remote server may know the relationship between your account and your ip.

有的时候，我们不愿意信任远端服务器，但是又想方便一点，怎么办呢？我们这个时候要知道，远端关注的本质，是透过web finger来解析出一个url，远端服务器给这个url带上（关于*你想fo的用户的*）参数，然后跳转到你所在的服务器。
Sometimes, we do not want to trust the remote server. What should we do? Now we need to know that remote following is basically extracting a url via web finger; the remote server parameterizes the url (with *the user you would like to follow*), and then redirect to the server where you are.

对于mastodon跟pleroma来讲，每个用户的这个跳转链接都是一样的，这就意味到，你在远端输入任何一个在你的服务器高头的用户id，效果都是等同的。比如讲，你完全可以输入 mew@kazv.moe 而不是你自己的用户名。
For mastodon and pleroma, the redirect link for each user is the same. This means you can achieve the same effects by entering any user id on your server into the remote. For example, you can totally enter mew@kazv.moe instead of your own username.

当然这个也是有局限性的，你的服务器还是会给远端发请求，产生一个域名-账号的相关性（请求高头是带了你的用户名的）。最好肯定还是在你自己的服务器上搜索对面的id。
Of course this is not without limitations; your server will still send a request to the remote, generating a domain-account relationship (as the request bears your username). The best way is definitely searching for their id on your own server.

“所以下笔不能自休”
把诗还给我们吧
@syllistof