2020-07-15 UTC
# 
[fluffy] Insisting that the domain owner be in control of all things IndieAuth has a rather alarming set of side effects. Like, that implies that on shared-domain static hosting, it’s up to the domain owner to select a specific IndieAuth endpoint and inject the headers/link tags into all pages being served up, or to actively filter out such things from hosted content if they don’t want to take the responsibility.