2017-06-06 UTC
# 
jaywink really hopes server to server authorization doesn't become a thing and instead authorship is validated in other ways (=signatures or remote lookup). Lots of good nice use cases ruined when servers don't just look at the payload but require some kind of auth. It doesn't even do verification of content authorship at all, so that needs to be done anyway.