Support for RFC 9421 - HTTP Message Signatures in #curl ?
https://github.com/curl/curl/discussions/13376
Support for RFC 9421 - HTTP Message Signatures · curl curl · Discussion #13376
Hello, Is there any interest to add support for RFC 9421 - HTTP Message Signatures to curl ? I saw that curl already support AWS Signature v4 (with --aws-sigv4), and I feel this RFC is a generaliza...GitHub
rallias
in reply to daniel:// stenberg:// • • •That would be super awesome!
One thing that I'd like to ask, if it's not too much trouble - a major user of HTTP signatures is the fediverse, although the most common version used is draft-cavage-http-signatures rather than RFC 9421, and the two versions are incompatible (quoted header keys, different header structure to express the signature value). Misskey has a proposal to express the supported version in nodeinfo, although for legacy applications being able to use the older standard would provide value as well.
Julian Fietkau
in reply to daniel:// stenberg:// • • •HTTP signatures are widely used in the ActivityPub ecosystem, including by Mastodon. https://swicg.github.io/activitypub-http-signature/
Convenient support in curl might make it easier to test some ActivityPub server functionality, although different ActivityPub implementations currently require different versions of the HTTP signature standard (see the above link for details).
Penny for your thoughts @evan @snarfed.org @hongminhee @renchap
ActivityPub and HTTP Signatures
swicg.github.io