New Signatures Draft

We’ve published a new version of the Signatures draft:

https://www.ietf.org/archive/id/draft-ietf-httpbis-message-signatures-02.html <https://www.ietf.org/archive/id/draft-ietf-httpbis-message-signatures-02.html>

It’s been a while since the last publication, and there are a lot of big changes from the -01 version. The short version:

 - Two headers, one for signature inputs and one for the signature itself
 - Headers both use Structure Field syntax
 - Signature base string generation mechanism uses Structured Field composition rules
 - Signature now always covers the signature metadata (this alone solved about a half dozen reported problems, at least)

It’s still a bit drafty, but it’s implementable: I’ve managed to implement the client and server side of this in Java, thanks to Julian’s Structured Fields library on that platform. 

 — Justin