tantekthe average person, even the average friend of a friend, or following of a following, cannot really be trusted to not be trolling. some people I follow on Twitter themselves follow some trolls for example.
aaronpkso basically it's a way for example.com to verify the identity of any user by their domain name without having to write any oauth code. obviously example.com wouldn't have any authorization to do anything with the user's accounts (can't read tweets, whatever), which is probably a good thing anyway
aaronpkthe other nice thing is that anyone can run this indieauth service on their own systems and put in their own app credentials if they wanted. I'll just have one version of it running on indieauth.com for people who don't want to go to the trouble of setting it up themselves!