sites/wiki.trwnh.com
1
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

http sig note

Browse source
This commit is contained in:
a 2023-07-26 21:26:06 -05:00
parent 301945550d
commit 8bedb448a1
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
content/tech/spec/activitypub/extensions/http-signatures.md Normal file
View file

@ -0,0 +1,5 @@
draft 8 cavage
even in the updated HTTP Message Signatures which supercedes the old HTTP Signatures, the `keyId` resolution to get the actual key material is unspecced, it's up to app logic
so you need to clearly specify somewhere such rules. like "keyId must point to a json-ld object with type sec:Key and must have sec:owner pointing to an activitypub actor" or something like that