2019-01-22 UTC
# 
fr33domlover JasonRobinson[m], HTTP sig is used for verifying the server approves the activity author identify, it can be used for 30 seconds and then the sig means nothing. But what I need is permanent identification like the PGP key you use to sign email, so I think we need to agree on whether HTTP sig keys identify the person or not