Its goal is to simplify bindings between cryptographic tokens and the
real-world entities that humans actually care about.
-In its current technical conception, is a minimal HTTP server that
-accepts two requests:
+In its current technical conception, the validation agent is a minimal
+HTTP server that accepts two different requests:
-POST /reviewcert (vars: uid, context, pkc)
-POST /extracerts (vars: certificates)
+GET / -- initial contact query, protocol version compatibility.
+ (no query parameters)
+ (returns: protoversion, server, available)
-the variables that are posted are posted in a JSON string (*not* as www-form-encoded).
+POST /reviewcert -- request validation of a certificate
+ (query parameters: uid, context, pkc)
+ (returns: valid, message)
+
+query parameters are posted as a JSON string (*not* as www-form-encoded).
the variables that are returned are application/json as well.
(UID means: User ID (like in OpenPGP))
(context means: (this is too vague right now) something like "this certificate was used to try to identify an HTTPS server")
-
Authors: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
Matthew James Goins
Jameson Rollins