ActivityPub - W3C specification

The security considerations are non normative and do not recommend anything specific.