I'm fairly sure I'm getting a proper token. Using the page http://www.hueniverse.com/hueniverse/2008/10/beginners-gui-1.html I get the same signature as in my failing url.
GET looks like: http://twitter.com/friendship/exists.json? oauth_consumer_key=Rg4VBVUvAoThpl78duF3Rg &oauth_nonce=375494971125145587 &oauth_signature=xWCdscsa6I4GJphDIQAnsDmjyhM%3D &oauth_signature_method=HMAC-SHA1 &oauth_timestamp=1240933535 &oauth_token=765803-e2mAy2wkQy4wRI9LQC73cZwbiwmmJ7mZJh04MZiWk &oauth_version=1.0 &user_a=tayknight &user_b=wxtweet I must be missing something obvious. Other GETs work. I can provide secrets to TwitterAPI folks if they want to help debug. Thanks.