Address reviewer feedback on httpsig - #391

Merged

mickenordin merged 11 commits into

kano-httpsig-justin

Jul 28, 2026

Commits on Jul 23, 2026

Do not cover the Date header in HTTP Message Signatures
mickenordin
committed
b20723d
Discover JWKS via jwksUri instead of /.well-known/jwks.jso
mickenordin
committed
0ee6ea9
Derive the signature algorithm from the JWK, not a fixed list
mickenordin
committed
36e5e80
Require the keyid signature parameter to match the JWK kid
mickenordin
committed
ee6509c
Make Appendix B fully informative
mickenordin
committed
610b385
Use Content-Digest instead of legacy Digest in Token Request example
mickenordin
committed
43469c6
Use RFC 8792 line wrapping in HTTP signature examples
mickenordin
committed
d1f410d
Align remaining sections with the revised HTTPSig model
mickenordin
committed
de2c2ea

Commits on Jul 26, 2026

Acknowledments: add Justin Richer
mickenordin
committed
800476d
Apply review feedback from Mahdi on PR #391

mickenordin
and
MahdiBaghbani
committed
7b5e2b9

Commits on Jul 28, 2026

Fix http(s) and update replay protection text

mickenordin
and
MahdiBaghbani
committed
35b9410