barnabyI must admit I do lean towards preferring signed requests over ticket auth for these use cases, and am curious to see what comes out of the IETF HTTP signatures group, and whether it’s something which could be integrated into indieweb usage easily
