From bca5003de82f6f2b8a1bc3ebf2f76b6c22737c67 Mon Sep 17 00:00:00 2001
From: Christopher Lemmer Webber <cwebber@dustycloud.org>
Date: Wed, 17 Jul 2019 12:27:13 -0400
Subject: [PATCH] comment-clarification of authentication semi-consensus

---
 README.org | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/README.org b/README.org
index 2ff0b9f..962ec54 100644
--- a/README.org
+++ b/README.org
@@ -17,7 +17,9 @@
 
 #   - sharedInbox is a break from the actor model protocol and was a late
 #     addition
-#   - authentication is not specified
+#   - authentication is not specified.  The community has settled
+#     on using http signatures for signing requests, though there is no
+#     "clean agreement" on how to attach signatures *to* posts yet.
 #   - authorization is not specified
 #   - (json-ld conversations outside of the scope of this particular post)
 
@@ -36,6 +38,7 @@
 
 
 
+
 ** Don't pretend we can prevent what we can't
 
 ** Freedom of speech also means freedom to filter