w3c / activitypub

http://w3c.github.io/activitypub/
Other
1.24k stars 78 forks source link

Document issues with redirects in activitypub id uris #456

Open evanp opened 3 months ago

evanp commented 3 months ago

We need to provide guidance for publishers and consumers on using redirects.

evanp commented 3 months ago

one issue is http signatures; youd need to resign when refetching.

second is same-origin security practice; do you treat the origin as the ids origin or the redirected urls origin?

ThisIsMissEm commented 3 months ago

This issue was created following discussion of https://github.com/w3c/activitypub/issues/455