#Loqi[oshepherd] My general rough idea for server-to-server auth was that
* The user's profile would contain a reference to one or more JSON Web Keys with a usage something like "https://www.w3c.org/ns/activitypub#origin" (maybe via a "jwks" endpoint URI?) (N.B. t...