Double-knock strategy for HTTP Signature
2026-04-24 22:43 UTC
@evan I do know that @silverpill@mitra.social currently only implements RFC 9421 in one direction only.
So his input may be relevant here... the assumption that if you see 9421 in action, you can assume 9421 support may not be as broadly true.
Replies (1)
-
@silverpill@mitra.social 2026-04-25 18:38
@julian @evan @technical-discussion I proposed FEP-844e as an alternative to double-knocking, it should work well for POST requests because normally you fetch an actor before sending activities to its inbox. Several early adopters of RFC 9421 already implemented this FEP (including WordPress).