prologicIN order to prevent abuse of a websub's callback, you can verify you actually have a valid and confirmed subscription to the hubendpoint for self -- How how shall I respond to such bogus inbound notifs?
ZegnatGWG: I am not sure I understand the question. You can have as many - in an mf2 property as you want: “one or more '-' separated lowercase a-z words.”
jackylike if I've sent a Webmention to someone before and then I've recieved one from them, using those links as 'vouches' of 'good faith' especially if one's own internal moderation hasn't flagged them as such