@evan @erincandescent aren't most softwares rn only authenticating the server already anyway? it's a core assumption of the "instance" model