Open RangerMauve opened 2 years ago
On approach that's based on what @resession in bt-fetch is to specify the key info inside the authorization
header when performing the POST
or PUT
request.
Some other thoughts. At the moment we generate keys using POST ipns://localhost?key=whatever
. Maybe this could be extended with having the PEM data inside the body?
Would also be good to think about how to export. Maybe GET ipns://localhost?key=whatever&format=pem
or specifying something in the Accept header? Might be good to put this behind a user prompt to make it harder for malicious websites to steal your keys.
Based on work in the IPFS gateway