#social 2017-05-19

2017-05-19 UTC

aaronpk If you send an access token in the initial webmention request then the spec should absolutely recommend that it has a very short expiration and has no privileges other than fetching the one post