That said, Mastodon 4.x follows still do not work despite the 500 patch, so the site will probably have to be HTTPS. Amusingly, Soapbox follows still work regardless, as it seems to use a forked Mastodon 3.x format.