#social 2017-06-14

2017-06-14 UTC

jaywink "The receiver MUST verify the notification by fetching its source from the origin server." and "All notification POST requests are authenticated" are not there in such strictness AFAICR