2023-03-14 UTC
# 
Ruxton The reason I think this is, there is use cases where you can accept the IndieAuth userid as the user and if they connect from somewhere else, it doesn't matter because you're not storing user data. But any site that has profiles and tracks historical user contributions/data, being bound to that userid is illogical.