I (hopefully) made some progress regarding HTTPS signature handling and double-knocking.
-
I (hopefully) made some progress regarding HTTPS signature handling and double-knocking.
Current default is to first try draft-cavage-http-signatures-12, then RFC 9421: HTTP Message Signatures. This may be changed later.
Retry (the second knock) is done, if the first results in a 400, 401 or 403.
If the peer instance has accepted DC12 in the past, the double-knocking will use DC12 first, then RFC9421.
If the peer instance has accepted RFC9421 in the past, the double-knocking will use RFC9421 first, then DC12.
-
I (hopefully) made some progress regarding HTTPS signature handling and double-knocking.
Current default is to first try draft-cavage-http-signatures-12, then RFC 9421: HTTP Message Signatures. This may be changed later.
Retry (the second knock) is done, if the first results in a 400, 401 or 403.
If the peer instance has accepted DC12 in the past, the double-knocking will use DC12 first, then RFC9421.
If the peer instance has accepted RFC9421 in the past, the double-knocking will use RFC9421 first, then DC12.
@nick@mammuthus.de shouldn't the double knock be 9421 first, and then cavage-12 on failure?
Also cool! I'd love to test NodeBB's implementation against it. <img class="not-responsive emoji" src="https://activitypub.space/assets/plugins/nodebb-plugin-emoji/emoji/android/1f604.png?v=5a9b4bf9c7f" title=":smile:" />
-
@nick@mammuthus.de shouldn't the double knock be 9421 first, and then cavage-12 on failure?
Also cool! I'd love to test NodeBB's implementation against it. <img class="not-responsive emoji" src="https://activitypub.space/assets/plugins/nodebb-plugin-emoji/emoji/android/1f604.png?v=5a9b4bf9c7f" title=":smile:" />
Needs more testing... before RFC9421 could be used first... 😉
Improving compatibility would be nice.
Afair i have already seen a NodeBB message using RFC9421, that was successfully verified.
Ciao! Sembra che tu sia interessato a questa conversazione, ma non hai ancora un account.
Stanco di dover scorrere gli stessi post a ogni visita? Quando registri un account, tornerai sempre esattamente dove eri rimasto e potrai scegliere di essere avvisato delle nuove risposte (tramite email o notifica push). Potrai anche salvare segnalibri e votare i post per mostrare il tuo apprezzamento agli altri membri della comunità.
Con il tuo contributo, questo post potrebbe essere ancora migliore 💗
Registrati Accedi