Based on my reading of rssCloud it seemed to lack a verification step so I'm glad to see the WebSub spec explicitly mention that. Without verification this seem

Based on my reading of rssCloud it seemed to lack a verification step so I'm glad to see the WebSub spec explicitly mention that. Without verification this seemed like an easy way to trick a server into sending random HTTP requests to third party services.