Going to start IndieWebCamp Day 2 by working on http://indiewebcamp.com/vouch
• Step 1: create an approval algorithm
• Step 2: when accepting webmentions, check against the approval algorithm
** if the source passes your initial approval algorithm, accept the webmention as normal
** if the source does not pass, return HTTP 449 to indicate the sender should re-try sending with a vouch parameter
• Step 3: when a webmention comes in with a vouch, check webmention as normal, then verify the vouch:
** check if I approve the vouching domain (it passed my approval algorithm)
** fetch the vouch URL, verify that it actually does link to the source's domain without rel=nofollow
** if vouch verification fails, return HTTP 400
WeChat ID
aaronpk_tv
