2017-05-19 UTC
# 
sandro aaronpk, fwiw, reading https://indieweb.org/private-webmention I'm really not convinced the 'extra step of exchanging an auth code for an access token' is warranted. At least, the argument given about it being more secure seems very weak.