sknebelas a consequence, nearly everything is pull-based: you want to check something is from a domain? fetch it's url and check if it's actually there. vs e.g. signed e-mails, where you push a signed message, because you can't "fetch" something, or ActivityPub (I think), ...
