Back down the rabbit hole of HTTP signatures + ActivityPub today. Fixed an issue, and reviewed the new community group draft. Don’t feel great that my code mostly resembles the make friends and verify requests blog post from 6 years ago rather than newer docs.