Open dshanske opened 2 years ago
The IndieAuth spec should expressly note a requirement of HTTPS for endpoints.
Also url normalization must expand example.com to https://example.com by default
The IndieAuth spec should expressly note a requirement of HTTPS for endpoints.