@ummjackson Yes, secure mode isn't about that. It's about requiring authentication on GET requests to federation endpoints.