Hi, I'm a site hosted on Matrix, an open network for secure, decentralized communication. It also happens to be a global Content Delivery Network with nodes across the world. I'm running on "Static Pages," the fastest and most scalable Matrix server implementation possible 🚀

• Yes, I can totally federate
• What? You say this isn't a CDN? (just replace the domain with your homeserver)

(yup, this video is also cached by this Matrix server)

Further Reading

• Media in the content repo is not authed (matrix-org/matrix-spec#870)
(2017)
• Only let authed local users request remote content (matrix-org/synapse#2133) (2017)
• MSC701: Auth for content repo (and enforcing GDPR erasure) (2016)
• MSC1902: Split the media repo into s2s and c2s parts (2019)
• MSC2461: Proposal for Authenticated Content Repository API (2020)
• MSC3916: Authentication for media (2022)

But seriously, go support MSC3916 which will prevent tricks like this from working.