2021-08-26 UTC
# 
[tantek] 2 is it time to change the implied scheme/protocol for web sign-in (and IndieAuth/Login in particular) explicitly to "https" ? I was thinking of "just" going ahead and doing this in the Web Sign-in spec (and then updating implementations accordingly), but figured I'd run it by this crowd first