RE: https://indieweb.social/@laurenshof/116103545853411360

This thread talks about going back to an #ActivityPub users's home server to validate a user's content, because you can't trust that the event you got for it is unmodified.

But you can't trust what the home server tells you the content of the message is either! There's nothing stopping a home server from serving a modified version of your content every time it's requested, say, to inject ads into it, or censor bits it doesn't like.

Or to just completely fabricate new content from you.