@mikedev @julian

[silverpill@mitra.social]

@mikedev @julian

but as I recall it didn't really work well with private groups and aspects/circles

Last time I heard about 1b12 private groups, the proposed solution was to use a "collection inclusion endpoint" to verify that actor is a member of a group

[julian@community.nodebb.org]

silverpill@mitra.social do you still need to if you're not using a shared inbox?

[silverpill@mitra.social]

@julian @mikedev Yes, if you receive an Announce(Create), and Create is not signed, then you need to retrieve this Create from its origin. When that origin server receives your signed GET request, it needs to verify that you belong to the group, but it might not have that information.