Re: [whatwg/fetch] Add `Signature` to `CORS non-wildcard request-header name` (Issue #1819)

jricher left a comment (whatwg/fetch#1819)

Note that you'd also want to add the `Signature-Input` header to the same list, as they're designed to work together in tandem.

RFC9421 is in use for API protection but I haven't seen it as much browser-side yet. I would personally love to see native support added to `fetch()` calls (ie, pass in a key and signature parameters and it signs the message with a non-exported key for you).

-- 
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/1819#issuecomment-2770493380
You are receiving this because you are subscribed to this thread.

Message ID: <whatwg/fetch/issues/1819/2770493380@github.com>