2018-09-11 UTC
# 
saranix "it makes sense for AP to specify more detail on that" --> no more than it makes sense for AP to specify exactly what an inbox url has to look like. There are different usecases that require different things. Guidance here: https://web-payments.org/specs/source/http-signatures-audit/