Hello Internet friends! What is the latest hotness in signed HTTP requests? Looking for a) easy to understand from... aaron.pk/n4St1

Hello Internet friends! What is the latest hotness in signed ...

Hello Internet friends! What is the latest hotness in signed HTTP requests? Looking for a) easy to understand from both client and server perspectives, and b) easy to implement in multiple languages...

aaronparecki.com
3
1
2
@aaronpk Doesn't SHA HMAC fit the bill? Depends on a shared secret, otherwise, pretty groovy.
1
Replying to @peat
@peat Yeah that seems to be the general consensus, but still leaves questions like which headers to sign, is the... aaron.pk/r4St6

Nov 5, 2013 · 4:48 AM UTC

2
Replying to @aaronpk
@aaronpk I suppose it depends on what you're protecting against, what's consistent in the environment, and what costs are associated.
Replying to @aaronpk
@aaronpk ... Which is to say, I guess I'm skeptical of a magic bullet signing system. :D