Kara Mahan

Bridgy does a brilliant thing providing users access to (a sanitized version of) the log. It's invaluable as a developer trying to integrate with Bridgy, and would be a TON...

CSRF protection using state parameter

1

we need to protect against malicious redirects by adding a verifiable signature to the state parameter (in addition to the app-supplied next_url). TODO understand this better. http://tools.ietf.org/html/rfc6749#section-10.12 http://www.twobotechnologies.com/blog/2014/02/importance-of-state-in-oauth2.html

Should default to http://

Indie events should offer RSVP actions in addition to reply, etc.

2

[thus saith](http://indiewebcamp.com/irc/2015-11-20/line/1448048880045) @tantek and I agree

Collect reply chains (especially when we subscribe to all participants) so that you don't get these weird, out-of-order repetitious entries from a series of tweets 

So that the Back button brings you back to where you were, instead of reloading just the first page.