@silverpill Is POSTing to an actor's outbox (/users/:nickname/outbox) used in AP by anything except C2S? After reading the relevant parts of the spec, it doesn't seem so and I can't find any evidence of POSTs to any outbox in my access logs, but I still want to make sure.

Since I'm already making a permission change to the C2S Pleroma pipeline (which requires only authenticated users to POST to their outbox), I can look into other weird avenues of federation someone might have created.
0

If you have a fediverse account, you can quote this note from your own instance. Search https://fluffytail.org/objects/99e7a61a-36de-44ce-9b18-bf756085ddf7 on your instance and quote it. (Note that quoting is not supported in Mastodon.)