search

misskey-dev / node-http-message-signatures

An JavaScript (Node.js and browsers) implementation for HTTP Message Signatures (RFC 9421)
MIT License
9 stars 4 forks source link

質問: Multiple Signaturesって全部検証する必要あるの？ #11

Closed tamaina closed 6 months ago

tamaina commented 6 months ago

https://datatracker.ietf.org/doc/html/rfc9421#name-multiple-signatures

英語読めない（AIとかで仕様書読むやつで無料のやつないの）

tamaina commented 6 months ago

If there is more than one signature value present, determine which signature should be processed for this message based on the policy and configuration of the verifier. If an applicable signature is not found, produce an error.

https://datatracker.ietf.org/doc/html/rfc9421#section-3.2

based on the policy and configuration of the verifierらしい

tamaina commented 6 months ago

つまり検証関数を実装するときはポリシーを提供してもらう必要がある