## Backend

- [x] Check that signature header (digest) matches digest of body contents
- [ ] Posting
    - [x] Making posts locally
    - [x] Figuring out follower list
    - [x] Sending to followers
    - [x] Post formatting
    - [ ] Sending posts w/ images / videos
    - [ ] Receiving posts w/ images / videos
- [x] Timeline
    - [x] My posts
    - [x] Posts from accounts you follow
    - [x] Show the actor avatar and display name
- [x] Deleting posts
- [x] Profile
    - [x] Name field (for display name)
    - [x] Bust actor cache when you update your profile
- [x] Following
    - [ ] Scrape public posts from the outbox when you follow
- [ ] Unfollowing
- [x] Being followed
- [x] Accepting follows
- [ ] Blocking
- [ ] Approving / declining follows
- [ ] Manage authorized instance list
- [ ] Liking
- [ ] Unliking
- [ ] CW posts
- [ ] Polls
- [ ] DMs
- [ ] Support authenticated fetch of outbox (by allowed domains / servers)
- [ ] Followers-only posts (or maybe this is handled because we only send posts to followers? but we also include public in the TO field?)
- [ ] Check the domain of the public key against the domain of the object being CRUDed

## UX

- [x] Posting
- [x] Timeline
    - [x] My posts
    - [x] Posts from accounts you follow
- [ ] Deleting posts
- [~] Following
- [ ] Unfollowing
- [ ] Being followed
- [ ] Accepting follows
- [ ] Approving / declining follows and authorized instance list
- [ ] Liking
- [ ] Unliking
- [ ] CW posts
- [ ] Polls
- [ ] DMs

## Testing

- [ ] Measure test coverage
- [ ] Add tests