w3c / activitypub

http://w3c.github.io/activitypub/
Other
1.21k stars 77 forks source link

Document issues with redirects in activitypub id uris #456

Open evanp opened 1 month ago

evanp commented 1 month ago

We need to provide guidance for publishers and consumers on using redirects.

evanp commented 1 month ago

one issue is http signatures; youd need to resign when refetching.

second is same-origin security practice; do you treat the origin as the ids origin or the redirected urls origin?

ThisIsMissEm commented 1 month ago

This issue was created following discussion of https://github.com/w3c/activitypub/issues/455