@tokyo_0 You can use a RSS-Bridge instance to test it. Pick an instance from https://rss-bridge.github.io/rss-bridge/General/Public_Hosts.html , search for "ActivityPub", put in someone's handle, select "don't sign" in signature type, then see if it throws out a 401. If it does, then there is Authorized Fetch; otherwise it doesn't.