The idea was that ditto would be a fedi instance and nostr relay at the same time (though obv as Alex works through this he may find this unfeasible or change plans). Because you would have a fedi identity when you posted at mas.to it would be under b at ditto.instance.name (or something like that) so they would need to be blocking that as well.