e14n / webfinger

Webfinger client library for Node.js
Apache License 2.0
40 stars 10 forks source link

Flag to prevent falling back to unencrypted http for hostmeta() #12

Closed evanp closed 11 years ago

evanp commented 11 years ago

For some high-security uses, it's important to only accept HTTPS-encrypted responses.

I think the best way to do this is add an optional options parameter to hostmeta, so you can call it like:

hostmeta(hostname, callback)

or

hostmeta(hostname, options, callback)

...where options is a map of flags including:

{httpsOnly: true}