issues
search
w3c-ccg
/
http-signatures
Signing HTTP Messages specification
https://w3c-dvcg.github.io/http-signatures/
Other
34
stars
9
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Fix: #63. forbid erroneously duplicate parameters
#65
ioggstream
closed
4 years ago
5
Status of this RFC related to European PSD2 (Berlin group) ?
#64
earroyoron
closed
5 years ago
9
Don't trust ambiguous parameters
#63
ioggstream
closed
4 years ago
10
We are signing parts of HTTP messages
#62
ioggstream
opened
5 years ago
1
Removed adding the content of the HTTP message in creating the signature string.
#61
RayTrommelenInfoSupport
opened
5 years ago
1
Correct typos & Documentation of the algorithm parameter
#60
aljones15
closed
4 years ago
3
2.1.2 signature in version 11 spec still tells people to use the algorithm parameter to sign.
#59
aljones15
opened
5 years ago
2
header and signature parameters are confusing.
#58
aljones15
closed
5 years ago
2
links to encryption algorithims documents in hsa registry go nowhere.
#57
aljones15
closed
5 years ago
2
[WIP] Add a version parameter.
#56
ioggstream
opened
5 years ago
0
Fix definition of rsa-sha256 to match previous versions
#55
jhominal
closed
5 years ago
0
Creating and Signing the Signature String
#54
RayTrommelenInfoSupport
opened
5 years ago
14
Support a versioning scheme
#53
ioggstream
opened
5 years ago
3
Presentation issues for the test vectors
#52
bortzmeyer
opened
5 years ago
1
(BC) Response code
#51
liamdennehy
opened
5 years ago
13
Concatenation of multiple-instance headers in signing string
#50
liamdennehy
opened
5 years ago
10
Minor fixes - parameter delimiters, urls, typos
#49
liamdennehy
closed
5 years ago
4
Clarify authorize vs sign
#48
liamdennehy
closed
5 years ago
2
Headers clarifications
#47
liamdennehy
closed
5 years ago
5
Exernal reference urls return 302, only on http
#46
liamdennehy
closed
5 years ago
1
Update External Reference Links
#45
liamdennehy
closed
5 years ago
0
Date header
#44
liamdennehy
closed
5 years ago
0
Better Reference Tests
#43
liamdennehy
closed
5 years ago
2
Signing String construction - validation logic
#42
lukasz-szewc
closed
5 years ago
4
Questions related to `headers` interpretation
#41
lukasz-szewc
closed
5 years ago
4
Link to signature-algorithms - page does not exist
#40
lukasz-szewc
opened
5 years ago
7
Server should not trust client header
#39
ductm54
closed
5 years ago
10
Unusual space inserted in signature string for Basic Reference Test
#38
liamdennehy
opened
5 years ago
2
Fixes: #35. Add `date` and `expires` to signature
#37
ioggstream
closed
5 years ago
7
Signed Headers should either mention representation metadata or forbid them
#36
ioggstream
opened
6 years ago
12
Signature header does not contain date, expires
#35
ioggstream
closed
5 years ago
11
Consider using http2 structured headers for Signature
#34
ioggstream
opened
6 years ago
5
Date header is not mandatory in HTTP/1.1 RFCs yet relied on by "headers" field
#33
liamdennehy
closed
5 years ago
6
Clarify behaviour on missing headers in HTTP request/response
#32
liamdennehy
closed
5 years ago
3
Add examples for ECDSA Signatures
#31
msporny
closed
6 years ago
1
Clarification on ECDSA signatures
#30
ejholmes
closed
5 years ago
5
Revision 10's Extra 'algorithm' Note
#29
cjslep
opened
6 years ago
15
Dead link to Signature Algorithms registry
#28
cjslep
closed
6 years ago
1
Provide mechanism to encode HTTP response status
#27
msporny
opened
6 years ago
4
Specify URL encoding for request-target
#26
msporny
opened
6 years ago
14
Accept-Signature request header
#25
wrygiel
opened
6 years ago
15
Fix invalid date in section C.1
#24
wrygiel
closed
6 years ago
4
Fix signatures in examples.
#23
cwebber
closed
6 years ago
2
Use case: server signing other content
#22
bblfish
closed
5 years ago
3
Test Vectors are wrong
#21
msporny
closed
6 years ago
3
Omit rsa-sha1 from the Signature Algorithm Registry
#20
jyasskin
closed
5 years ago
4
Describe how to use this to get origin authentication
#19
jyasskin
opened
7 years ago
4
Mention the risks of (request-target) omitting :authority
#18
jyasskin
closed
7 years ago
3
Wrong section referenced for auth-param
#17
jyasskin
closed
5 years ago
6
Security considerations should talk about public key distribution
#16
jyasskin
opened
7 years ago
2
Previous
Next