2025-07-02 UTC
# 
[manton] [capjamesg] I have. Mastodon can be configured to require all GETs to be signed. Personally I find that totally unnecessary, but it is what it is. If a GET fails in http://Micro.blog, a re-sign the request with the user’s account if I know who the request is on behalf of, otherwise I sign it with our generic “help” user.