Protocol Specifications and Documentation

[Tomek Rabczak]

Hi,

I was wondering if there have been any developments on the protocol specification and documentation. Reading the overview definitely helps in giving a general idea about what the standard will be for at a high-level but I haven't been able to find more information on lower level details about what the standard will accomplish.

I was interested in using PnH to develop an authorization checking tool that would work work with Burp, using the browser as a way to collect URLs. At a high level, there would be an extension to firefox that would allow you to easily switch user-roles. While browsing the site as that user role, the browser would use PnH to send over URLs that it finds in the pages as that user role to an extension running in Burp. From here, the extension would keep track of which URLs are available to which user role and compare site maps. 

Still just an idea, but I was curious as to whether the PnH standard would be useful in accomplishing this (as a means of browser to tool communication).

Thanks,

Tomek Rabczak