Skip to main content


Support for RFC 9421 - HTTP Message Signatures in #curl ?

github.com/curl/curl/discussio…

#curl
in reply to daniel:// stenberg://

That would be super awesome!

One thing that I'd like to ask, if it's not too much trouble - a major user of HTTP signatures is the fediverse, although the most common version used is draft-cavage-http-signatures rather than RFC 9421, and the two versions are incompatible (quoted header keys, different header structure to express the signature value). Misskey has a proposal to express the supported version in nodeinfo, although for legacy applications being able to use the older standard would provide value as well.

in reply to daniel:// stenberg://

HTTP signatures are widely used in the ActivityPub ecosystem, including by Mastodon. swicg.github.io/activitypub-ht…

Convenient support in curl might make it easier to test some ActivityPub server functionality, although different ActivityPub implementations currently require different versions of the HTTP signature standard (see the above link for details).

Penny for your thoughts @evan @snarfed.org @hongminhee @renchap