API responses should be signed: shkspr.mobi/blog/2020/01/w… Comments: news.ycombinator.com/item?id=220740…