Helge on Nostr: Good morning Fediverse. It's another day, where I see people writing about HTTP ...
Good morning Fediverse.
It's another day, where I see people writing about HTTP Signatures. So my regular reminders:
HTTP Signatures are a standard in the purview of the IETF.
HTTP Signatures is a terrible name for the transport protocol used by the Fediverse. I should probably go ahead and write up something and call it "Fedi Transport". The mechanism of HTTP Signatures will probably be 1 out of 4 parts.
HTTP Signatures secure the Headers of a HTTP message. This means claiming that implementing HTTP Signatures requires checking the digest is wrong! You should check the digest, because you implement the Digest algorithm. (One can also sign the trailers, and use this to secure chunked HTTP ... )
The algorithms the Fediverse uses are outdated. The new RFCs will probably be out this or next month. We should get ready to switch.
It's another day, where I see people writing about HTTP Signatures. So my regular reminders:
HTTP Signatures are a standard in the purview of the IETF.
HTTP Signatures is a terrible name for the transport protocol used by the Fediverse. I should probably go ahead and write up something and call it "Fedi Transport". The mechanism of HTTP Signatures will probably be 1 out of 4 parts.
HTTP Signatures secure the Headers of a HTTP message. This means claiming that implementing HTTP Signatures requires checking the digest is wrong! You should check the digest, because you implement the Digest algorithm. (One can also sign the trailers, and use this to secure chunked HTTP ... )
The algorithms the Fediverse uses are outdated. The new RFCs will probably be out this or next month. We should get ready to switch.