So, here’s why my non-Hubzilla friends are not seeing the photos in my friends-only posts: The text in a post gets included in what is pushed out to other pods, but photos are attachments and only the link to them is sent. So, when a post appears in a feed, the browser has to go back to the original pod to pull the photo. Hubzilla implements privacy protections on all photos/uploads—in particular, the OpenWebAuth protocol (aka magic-auth). If your account isn’t associated with an OpenWebAuth profile, Hubzilla can’t authenticate you. Diaspora doesn’t implement OpenWebAuth; and Friendica implements a fork of the protocol that is not compatible with Hubzilla’s. The reason my friends were able to see photos in my friends-only posts from my D* account is that Diaspora implements no privacy protections whatsoever. (Even if a user uploaded the photo in the context of a friends-only post, anyone anywhere on the internet can still see that photo if they have its URL.)
Although it’s a pain in the patootie that my non-Hubzilla friends can’t see my photos, I’d rather have that than everyone else being able to see them too.
In other news, it is a beautiful day in my backyard. The Mountain Ash is heavy with berries. The sky is clear, the breeze is cool, and the sounds of grilling vegetables and tortillas being made by hand are coming over the fence. Basically, it is a perfect afternoon. And I may well end up napping on the porch soon.