Re: Web Keys and HTTP Signatures

On Apr 17, 2013, at 23:32, Manu Sporny <msporny@digitalbazaar.com> wrote:

> https://github.com/joyent/node-http-signature/blob/master/http_signing.md

I looked at this for about 5 seconds, but are you telling us the attacker gets to choose what the lines in the signed string are supposed to mean?

Grüße, Carsten

Received on Wednesday, 17 April 2013 22:03:47 UTC