Disable certain dangerous features for un-authenticated users

[jon-betts]

If we could make a user login before seeing the content, we could still allow anonymous access, but with more restrictions.

For example we could:

• Disable forms
• Disable links
• Other actions which make phishing difficult

We should also consider if any of these are acceptable as defaults, or if they break too much genuine content.

[dwhly]

I think there are two ideas here:

Disallowing unauthenticated use.
Disabling certain kinds of HTML features.

I think the first one is a non starter for the main via instance. I need to be able to tweet out a via link and have people easily see my annotations without logging in.

For the second, possibly forms but not links. People need to be able to click thru to another page, though that page doesn’t need to be proxied too.