#mammuthus — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #mammuthus, aggregated by home.social.
-
I (hopefully) made some progress regarding HTTPS signature handling and double-knocking.
Current default is to first try draft-cavage-http-signatures-12, then RFC 9421: HTTP Message Signatures. This may be changed later.
Retry (the second knock) is done, if the first results in a 400, 401 or 403.
If the peer instance has accepted DC12 in the past, the double-knocking will use DC12 first, then RFC9421.
If the peer instance has accepted RFC9421 in the past, the double-knocking will use RFC9421 first, then DC12.