ietf-wg-wimse / draft-ietf-wimse-s2s-protocol

WIMSE Service to Service I-D
Other
3 stars 3 forks source link

a construct that's both simple and extensible(?) #25

Closed bc-pi closed 2 weeks ago

bc-pi commented 4 months ago

Although we can definitely punt on it for now, I think we could choose a construct that's both simple and extensible.

"signed_headers": {
   "txn-token": "txn token hash",
   "x-custom-context": "x-custom-context hash"
}

Unfortunately we need the WPT to sign miscellaneous stuff, because we don't want a new WIT for every call. Having said that, as far as I can tell it does NOT need to sign the WIT itself.

_Originally posted by @yaronf in https://github.com/yaronf/wimse-s2s/pull/19#discussion_r1648132681_

bc-pi commented 4 months ago

https://github.com/yaronf/wimse-s2s/pull/19#discussion_r1655448211 related followup in the aforementioned comment

yaronf commented 2 weeks ago

Won't do, too complex.