Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Voluntary server identification, WebCrypto version #180

Closed
wants to merge 1 commit into from
Closed

Voluntary server identification, WebCrypto version #180

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
50 changes: 50 additions & 0 deletions index.html
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -110,6 +110,16 @@
status: "Internet-Draft",
publisher: "IETF"
},
"WEBPUSH-VAPID": {
title: "Voluntary Application Server Identification for Web Push",
href: "https://tools.ietf.org/html/draft-thomson-webpush-vapid",
authors: [
"Martin Thomson",
"Peter Beverloo",
],
status: "Internet-Draft",
publisher: "IETF"
},
"X9.62": {
title: "Public Key Cryptography for the Financial Services Industry, The Elliptic Curve Digital Signature Algorithm (ECDSA)",
status: "ANS X9.62–2005",
Expand Down Expand Up @@ -272,6 +282,11 @@ <h2>
"http://heycam.github.io/webidl/#idl-USVString"><dfn>USVString</dfn></a></code> are defined
in [[!WEBIDL]].
</p>
<p>
<code><a href=
"https://dvcs.w3.org/hg/webcrypto-api/raw-file/tip/spec/Overview.html#dfn-CryptoKey"><dfn>CryptoKey</dfn></a></code>
is defined in [[!WebCryptoAPI]].
</p>
<p>
The <dfn>web push protocol</dfn> [[!WEBPUSH-PROTOCOL]] describes a protocol that enables
communication between a <a>user agent</a> or <a>application server</a> and a <a>push
Expand Down Expand Up @@ -558,6 +573,13 @@ <h2>
with a <code><a>DOMException</a></code> whose name is "<code><a>SecurityError</a></code>"
and terminate these steps.
</li>
<li>If an <var>options</var> argument is included, and <var>options</var> includes an
<code><a>applicationServerKey</a></code> attribute, check that the value contains valid
values. If the <code><a>applicationServerKey</a></code> value is invalid or unsupported,
reject <var>promise</var> with an <code><a href=
"http://heycam.github.io/webidl/#invalidaccesserror">InvalidAccessError</a></code> and
terminate these steps.
</li>
<li>Let <var>registration</var> be the <code><a>PushManager</a></code>'s associated
<a>service worker registration</a>.
</li>
Expand Down Expand Up @@ -686,6 +708,9 @@ <h2>
<dt>
boolean userVisibleOnly = false
</dt>
<dt>
CryptoKey applicationServerKey
</dt>
</dl>
<p>
The <code><dfn id=
Expand All @@ -694,6 +719,31 @@ <h2>
for <a>push messages</a> whose effect is made visible to the user, for example by
displaying a Web Notification. [[NOTIFICATIONS]]
</p>
<p>
The <code><dfn id=
"widl-PushSubscriptionOptions-applicationServerKey">applicationServerKey</dfn></code>
option includes a <code><a>CryptoKey</a></code> for an application server. This is the
key that the application server will use to authenticate itself when sending push
messages to this subscription as defined in [[!WEBPUSH-VAPID]]; the push service will
reject any push message unless the corresponding private key is used to generate an
authentication token.
</p>
<p>
The value of <code><a>applicationServerKey</a></code> MUST include a <code><a href=
"https://dvcs.w3.org/hg/webcrypto-api/raw-file/tip/spec/Overview.html#dfn-KeyType">type</a></code>
of <code>public</code>, a <code><a href=
"https://dvcs.w3.org/hg/webcrypto-api/raw-file/tip/spec/Overview.html#dfn-KeyUsage">usages</a></code>
that includes the <code>verify</code> usage. A <a>user agent</a> MAY support different
values for the <a href=
"https://dvcs.w3.org/hg/webcrypto-api/raw-file/tip/spec/Overview.html#dfn-CryptoKey-algorithm">
algorithm</a> attribute, but they MUST support a a <code><a href=
"https://dvcs.w3.org/hg/webcrypto-api/raw-file/tip/spec/Overview.html#dfn-KeyAlgorithm-name">
name</a></code> of <code><a href=
"https://dvcs.w3.org/hg/webcrypto-api/raw-file/tip/spec/Overview.html#ecdsa">ECDSA</a></code>
and <code><a href=
"https://dvcs.w3.org/hg/webcrypto-api/raw-file/tip/spec/Overview.html#dfn-NamedCurve">namedCurve</a></code>
of <code>P-256</code>.
</p>
</section>
</section>
<section>
Expand Down