@brooke ah! So, when someone fetches a post or a profile through activitypub, they have to provide authentication. If the webfinger id matches a domain the blocklist, the request fails. If the request isn't authenticated, the block won't work.
@brooke I understand your point, that people want some anonymity when they're browsing the web. But I also see the other side -- people want to know who's reading their profile and posts. I think the Fediverse might find a different arrangement than commercial platforms have (namely, the platform knows everyone who does everything, does not share that info with other users).