2024-04-20 UTC
# 
Zegnat Gotcha! I was testing for a while with having a two step. So I would return an error (HTTP 400) immidately when I knew the target domain was wrong (simple and cheap test), but would add the request to a "to be checked" list and return an accepted response (HTTP 202). That way potential spammers have no feedback to know when they got to me or not, and the more expensive check that involves fetching other resources can happen out of