2020-07-15 UTC
# Zegnat Maybe. I kind of like it because it makes it clear in the spec that domain level is how things are segregated on the web. Not saying there is no reason for IndieAuth to segregate on path. But then I would like to see a big warning somewhere to inform people that as soon as the owner of one path-level up decides to do so, they can hijack your auth.