@pwm @kallisti @nyx

> what the hell do you do to get signatures working?

The answer to that is excessively long. I more or less followed the code in Honk/Pleroma/ActivityRelay/Masto and some random Masto blog post (it's https://blog.joinmastodon.org/2018/06/how-to-implement-a-basic-activitypub-server/ but it is also dated as hell and it doesn't work as-is). Support for ED25519 seems to be aspirational so I just used RSA everywhere, and I sign "(request-target)" (fucking fuck i hate that entire thing), Date, Host, and Digest (extra header for the body; I don't know how it handles GETs because I'm not planning to add signed fetches, SHA-256 works). What is it that you're doing? Might be easier than describing the entire process.

Pleroma often 500s on messages that it doesn't understand because they rely on pattern-matching pretty heavily and don't tend to handle the case where it doesn't match. Use PKIX for the pubkey you're serving or Masto will just break without explaining anything.

> Relevant, I am using cavage draft 6 as that seems to be what both use

iono, man. Specs and documentation seem to have been useless during this entire process.