:niggy: on Nostr: I don't think this was actually exploitable, I've been code reviewing pleroma and ...

I don't think this was actually exploitable, I've been code reviewing pleroma and webfinger isn't how instance/user identities are authenticated. good to further secure it anyway though