[manton]Anyone following Evan P’s work on an OAuth 2.0 profile for ActivityPub client-to-server? I asked whether IndieAuth could play a role here, but I haven’t a chance to figure out if that actually fits. Identity with WebFinger-style addresses vs. domain names might be too much of a mismatch.
