W3C home > Mailing lists > Public > ietf-http-wg@w3.org > January to March 2023

Re: Artart last call review of draft-ietf-httpbis-message-signatures-16

From: Julian Reschke <julian.reschke@gmx.de>
Date: Fri, 10 Mar 2023 09:01:46 +0100
Message-ID: <b3da5f39-49f4-ed39-d006-725e36f73458@gmx.de>
To: ietf-http-wg@w3.org
On 07.03.2023 18:39, Justin Richer wrote:
> ...
>> All of section 2.2 seems to assume that we’re dealing only with HTTP
>> URLs. This
>> assumption should be made explicit.
>
> This specification is signing for HTTP messages. What other URLs would
> there be at play here? It seems redundant to call it out, especially
> because we’re using the terms from the HTTP semantics specification to
> define the components.
> ...

HTTP can in theory also be used to access resources with non-HTTP(s)
URIs. In HTTP/1.1, you can use the absolute form of the request target
for that.

Is it common? No (I believe).

Best regards, Julian
Received on Friday, 10 March 2023 08:02:02 UTC

This archive was generated by hypermail 2.4.0 : Friday, 10 March 2023 08:02:03 UTC