wmo-im / wis2-notification-message

WIS 2.0 MQP message to notify users of availability of new data
https://wmo-im.github.io/wis2-notification-message
2 stars 2 forks source link

Asserting the origin of a WIS Notification Message #121

Open 6a6d74 opened 3 months ago

6a6d74 commented 3 months ago

Hashing & signing a WIS2 Notification Message at the point of publication would allow subscribers to assert that a message came from a given origin and has not been tampered with in transit. However, this functionality would require WIS2 Nodes to digitally sign their messages. The public key infrastructure (PKI) needed to underpin such functionality is complex and would be hard to manage. There is no clear requirement for this behaviour - yet. But we may need something like it in the future. If so, a mechanism is required to convey the digital signature with the message.