2021-01-20 UTC
# 
fr33domlover Thanks cwebber2`! Hmm does it make sense for @id URI of the AP activity that grants access to be used as the capability URI? The only downside I can think of is that even if the capability is revoked, the activity may still exist since it's in people's inboxes/outbox etc. and doesn't necessarily get deleted / 404. But either way, HTTP GETing the capability URI is not a reliable way to check