• #dev 2021-07-05
  • Prev
    Next
  • #indieweb
  • #dev
  • #wordpress
  • #meta
  • #stream
  • #microformats
  • #known
  • #events
#dev ≡
  • ←
  • →
2021-07-05 UTC
# 09:20
Zegnat
If we have a shared secret, and I use HTTP Signatures, if I send a signed request to sharedhost.test/~someoneelse/controls/this the someone else cannot grab the value and start impersonating me against other sites on sharedhost. Because only you and I have the shared secret