Question for someone more familiar with the Masto protocol: if an instance isn’t running in “Secure Mode”, is there still validation that federated replies, favorites etc. are genuine?
Not seeing signatures floating around debugging network activity so trying to figure this out.