@jamie Cool. So, you know that clients usually authenticate to their own servers using something like cookies (for dedicated web apps) or OAuth for web and mobile apps. However, clients can only authenticate to their *own* servers, not remote servers. For objects marked available to the Public, they can fetch objects from remote servers directly, without authentication. For objects marked as followers-only, or in DMs, they need to authenticate.