2018-08-12 UTC
# 
saranix fun fact: pleroma requires http sigs to POST to the inbox, but allows anyone to fetch objects (posts) even if the channel is set to 'followers only' so long as you have the uri. seems though that this proves that http sigs *are* necessary unless everything is public