signed http for restful api

[Steve Chen]

Hi, 

I have a question regarding signed http exchanges: as I understand it, the current tools are used to package static web content. Can it be used for API endpoints? 

Thanks, 

Steve

[Jeffrey Yasskin]

An API endpoint could certainly serve a signed exchange. The client would just need to understand it. To make it worthwhile, you'd want the client to also be able to use the signature to get some benefit over having only received an unsigned response.

--
You received this message because you are subscribed to the Google Groups "WebPackage-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to webpackage-de...@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/webpackage-dev/CAE1yhqnvYYn7d5KXfBw4HcDpxW7kuYnBF-Ey7deg6D5jiHF3bg%40mail.gmail.com.

[Steve Chen]

Ok, thanks. 

The demo tools in the GitHub repo were meant for manually packaging a web page.  So the API server would have to "package" every response dynamically, right?  There needs to be some dynamic packaging tools on the API server end for this, right?   

[Steve Chen]

To follow up on my previous email, can we just "package" everything that a particular http server serves (kind of like packaging/encoding the whole stream), instead of each individual page?  

[Kinuko Yasuda]

Hi Steve,

Signed exchange is basically for a single request/response, while what you're asking about might be about packaging multiple responses?

There are proposals that are called 'Bundles' (which are orthogonal to Signed exchanges) in the area, though their spec's still under discussion, and you're right that some dynamic packaging tool needs to exist on the server side either case (@Yoav Weiss has been actively exploring this space).

Here are some pointers:

If you're interested in packaging and serving an entire page/site (this is probably the closest):

https://github.com/WICG/webpackage/blob/main/explainers/navigation-to-unsigned-bundles.md

If you're interested in serving a set of resources on a page:

https://github.com/WICG/webpackage/blob/main/explainers/subresource-loading.md

https://github.com/WICG/resource-bundles/blob/main/subresource-loading.md

To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/webpackage-dev/CAE1yhqne6Qrdn54c9%3DiU%2BfkRdqa%3Dx%2B7V5HXnJN6bKpuS4c29jA%40mail.gmail.com.

[Steve Chen]

Hi Kinuko, 

Thanks, I'll check them out. 

Best, 

Steve