oh, and that AP signature mechanism? That's still in draft, not a standard at all. When I implemented it I found out that all the example values in the spec were wrong. (Mastodon didn't run into this problem because they didn't test the spec values).