[tantek]amazing that this stuff is still so hard like 10y+ after OAuth scopes were a thing. like why is this so hard? (we could say about various IndieWeb building blocks too 🙃 except OAuth was supposed to be "done" many years ago, and is at IETF which is held to a higher standard, as it were)
