2017-11-22 UTC
# aaronpk say i'm following example.com and it reports a post with a url like example.org/post/100. For the purposes of storing and deduplicating that, it's fine for me to use that URL within the scope of the example.com feed. However, when I report that to the client, it's no longer within the scope of example.com so there's a security risk that the client may allow that post to be overwritten by some other