FEP-2277 update: https://codeberg.org/fediverse/fep/pulls/708

- The Actor class now has the highest priority.
- Verification methods and public keys are treated as different classes.

This is needed because I discovered a way to bypass the same-owner check where attacker creates an ambiguous object (e.g. a Note with inbox property).

FEP-fe34 will be updated too, it will have a precise algorithm for determining the owner of an object.

#fep_2277

FEP-2277 update: https://codeberg.org/fediverse/fep/pulls/708

- The Actor class now has the highest priority.
- Verification methods and public keys are treated as different classes.

This is needed because I discovered a way to bypass the same-owner check where attacker creates an ambiguous object (e.g. a Note with inbox property).

FEP-fe34 will be updated too, it will have a precise algorithm for determining the owner of an object.

#fep_2277

I updated FEP-2277: ActivityPub core types: https://codeberg.org/fediverse/fep/pulls/697

- Short descriptions for every proposed core type.
- New section explaining that JSON-LD processing may be dangerous if duck typing is used.

#fep_2277