sender verification

diff --git a/zot.txt b/zot.txt
index 2a0b5f31dffb7bf3be29e34d03d0bbfb31f768b9..3ad7295cc612112c93648431b0c38d275d574d9e 100644 (file)
--- a/zot.txt
+++ b/zot.txt
@@ -30,6 +30,7 @@ resolvable addresses containing both salmon and zot endpoints.
  <zot:key>((key))</zot:key>
  <zot:iv>((iv))</zot:iv>
  <zot:env>((envelope))</zot:env>
+ <zot:sig key_id="xxx">((envelope signature))</zot:sig>
  <zot:alg>AES-256-CBC</zot:alg>
  <zot:data type='application/magic-envelope+xml'>((salmon))</zot:data>
 </zot:msg>
@@ -115,6 +116,15 @@ the "owner" of the endpoint.
 ednpoint is defined elsewhere in this document. The bulk delivery agent
 will deliver to all local addresses found in the address lists. 
 
+zot:sig
+*******
+
+The Sender of the message signs the underlying salmon data in the manner 
+prescribed by salmon. If the Sender and From address are identical, the
+signature will be identical to the signature of the underlying salmon packet. 
+If they are different, this signature is verified with the Sender's public 
+key to verify the Sender. 
+
 zot:alg
 *******