Right, those are all of them. And they only need to return the 404 status, not any other data.

For activity pub related endpoints, should it just be:

• outbox
• inbox
• following
• followers

Another thing to note: suspended users shouldn't show up in the Reader view.

I'll take this after T609 is in

I like the paper key idea, or even a set of recovery keys. Usually 8-12 random keys that the user prints or writes down. Then when needed they use one in place of a password, and are directed to set a new password. These are single use.

This was put on hold for now as the fix mentioned only allowed a single tag/category and the 3 supported feeds all allow multiple per item.