2016-12-09 UTC
# 
julianf Been wondering something about IndieAuth. If a rel-me link can be anywhere on one's home page, and if it's moderately common for a home page to include a feed of third-party comments etc... doesn't that lead to an easy attach vector for bogus rel-me links into anyone's page who isn't taking great care to filter them out?