@takahe This may (or may not) be relevant to some of the issues federating with GoToSocial: Apparently GTS is always strict about checking HTTP signatures.
@ktv We sign all outgoing requests and can pull data from them, so I don't _think_ it's that.