2020-11-13 UTC
# 
[Raphael_Luckom] I'm also curious about common practice for restricting / securing a webmention-notification endpoint. It seems like if it's secured, you need to maintain a list of people who are allowed to talk to you, and if it's unsecured it's unsecured. I've been thinking about trying to do it unsecured but having mentions just sit in an approval queue until I have a chance to look at them rather than getting published automatically.