friendica/friendica — pull request #338 by fermionic (2012-06-16 16:37:48+00:00)
Title: Diaspora dont check more signatures than diaspora does

Currently, when Friendica receives a comment, like, or relayable retraction from Diaspora, it always checks the author signature, and it also checks the parent-author signature if it exists.

However, in Diaspora, only the signature of the person that you directly received the item from is checked. Thus, the parent-author checks the author signature, but the relay recipients only check the parent-author signature. Since the parent-author has already checked the author signature, there's no need for each recipient to check it as well.

This also means that no person has to check a signature for a person who is not his/her contact.