@meso @Pawlicker @kirby @lain @Zergling_man @siina No, signatures are good since otherwise anyone with a copy of curl could impersonate anyone else on the network but sendoing out fake activities. When it gets shoehorned into object fetching, that's where I have a problem. There's simply no valid reason why I should be able to view a post in web frontend but not get the activity corresponsing to the same public post if some janny couldn't handle my rizz.