From 9fd5f7032b69b29e77599dd62adfe8d2f5cd4f20 Mon Sep 17 00:00:00 2001 From: a Date: Wed, 7 Dec 2022 16:28:10 -0600 Subject: [PATCH] pin http sigs spec at draft 8 --- content/en/spec/security.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/en/spec/security.md b/content/en/spec/security.md index 6864f55e..61557edf 100644 --- a/content/en/spec/security.md +++ b/content/en/spec/security.md @@ -11,7 +11,7 @@ menu: {{< caption-link url="https://github.com/mastodon/mastodon/blob/master/app/lib/request.rb" caption="app/lib/request.rb" >}} -[HTTP Signatures](https://datatracker.ietf.org/doc/html/draft-cavage-http-signatures) is a specification for signing HTTP messages by using a `Signature:` header with your HTTP request. Mastodon requires the use of HTTP Signatures in order to validate that any activity received was authored by the actor generating it. When secure mode is enabled, all GET requests require HTTP signatures as well. +[HTTP Signatures](https://datatracker.ietf.org/doc/html/draft-cavage-http-signatures-08) is a specification for signing HTTP messages by using a `Signature:` header with your HTTP request. Mastodon requires the use of HTTP Signatures in order to validate that any activity received was authored by the actor generating it. When secure mode is enabled, all GET requests require HTTP signatures as well. For any HTTP request incoming to Mastodon, the Signature header should be attached: