Post
In this Codeberg issue @thisismissem wonders..
> "Has anyone done an assessment of the authentication mechanisms and standards used by each of these [C2S] implementations?
https://codeberg.org/fediverse/delightful-fediverse-experience/issues/130#issuecomment-7554760
I will bring this to a #SocialHub topic later this week, if I don't forget (otherwise remind me :)
@smallcircles@social.coop @thisismissem@hachyderm.io huh, I didn't realize there were actual C2S implementations out there. That... might be bad, since Misskey (and especially Sharkey) tend to enforce things by signing key domain instead of actor URI. A naive C2S implementation (like a transparent inbox/outbox with no validation) might allow one user to impersonate another from the same instance
A space for Bonfire maintainers and contributors to communicate
