2024-02-03 UTC
# 
[snarfed] yeah that Mastodon vuln is real. large overlap with ActivityPub broadly, since authorization in general is largely unspecified. we made a first pass at documenting it in https://www.w3.org/wiki/SocialCG/ActivityPub/Authentication_Authorization