2021-07-28 UTC
# 
vikanezrimaya try some social engineering in a controlled environment, maybe trying to, let's say, present fake h-app to an authorization endpoint to trick the user into authenticating - it could've worked with one of my IndieAuth endpoint drafts...