Subject: Signaling absent fields in signatures

From: Justin Richer <[email-masked]>
Date: Thu, 17 Feb 2022 12:49:25 -0500

An idea got brought up a little while ago that you could have a signer signal that a given field would :not: be present in the message to be signed, and so that when the verifier sees this, they can check the message and see that if that field is present then it’s an error and must be rejected. I’ve put together a PR to add that functionality here, and I’d like to have people check it out to see if it’s clearly described and is useful:

https://github.com/httpwg/http-extensions/pull/1976 <https://github.com/httpwg/http-extensions/pull/1976>

 — Justin