I have noticed since watching apache logs on my blog that the emails of Pleroma users are visible. Is that how it should be? Seems like it's a security leak.
Are mastodon emails de facto public too?
To answer your question,
Mastodon are not email default public.(perhaps moderators can see users email.)
As far as I know Pleroma and mastodon are based on different structural.
You're welcome.
@Sphinx thank you! That puts me at ease