clarify that multiple x tags are not a bulk delete

outlaw-dame · Aug 27, 2024 · 632c0ce · 632c0ce
1 parent 2de7c0d
commit 632c0ce
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/buds/02.md b/buds/02.md
@@ -103,6 +103,10 @@ Servers should perform additional checks on the authorization event
 1. The `t` tag must be set to `delete`
 2. MUST contain at least one `x` tag matching the sha256 hash of the blob being deleted
 
+When multiple `x` tags are present on the authorization event the server MUST only delete the blob listed in the URL.
+
+**Multiple `x` tags MUST NOT be interpreted as the user requesting a bulk delete.**
+
 Example Authorization event:
 
 ```json