[Question] How can I determine whether the authserver I connected is Mojang or 3rd-party

[teddyxlandlee]

As 1.19.1 releases, many players are concerning that they're possibly reported by others if their keypair are signed by Mojang, and they signed their chats.
However, keypairs signed by 3rd party yggdrasil servers can't be recognized by Mojang's report system.

What I'm planning to do is to develop a mod warning players who are connecting a Mojang-auth server which enforces secure profile.

How can I determine whether the player is connecting Mojang-auth or 3rd-party authserver?

Thank you.

[yushijinhun]

With the release of authlib-injector v1.2.0, clients with authlib-injector will use a randomly-generated profile key, and an empty signature (\0). Both the server and the client will accept any profile key, regardless of whether the signature is valid or not.