Why, Mastodon? Why?
Why are you forcing signed requests for all "Accept: application/json" HTTP requests of the actor URL? Rather than just actors that choose to be "private".
...
curl -H 'Accept: application/activity+json' https://mastodon.social/users/reiver
{"error":"Request not signed"}
@reiver the main reason is this: https://github.com/mastodon/mastodon/pull/40283
Use bloom filters to limit what servers account deletion notices are sent to by ClearlyClaire · Pull Request #40283 · mastodon/mastodon