2022-03-23 UTC
# 
[fluffy] The core TicketAuth protocol was written with the assumption that we already know the canonical profile URL and that we can look up the ticket endpoint from that. Which is a great assumption for the “site owner grants access to someone” flow. But it falls apart when it comes to having someone *request* that a ticket be granted to their arbitrary URL.