Untitled attachment

Notices where this attachment appears

1. Embed this notice
   silverpill (silverpill@mitra.social)'s status on Wednesday, 05-Nov-2025 04:58:13 JST silverpill

   in reply to

   @mariusor @Marius I use these properties to determine who is the owner of an object. When both are present the result is ambiguous and that leads to a security risk in one situation which is currently theoretical but may be important for the client-to-server protocol that I am designing.

   So I made the validator more strict to see who is generating objects with ambiguous ownership. Your actor and attributedTo are the same but I currently don't account for that.