From: Friendika <info@friendika.com>
Date: Thu, 1 Sep 2011 04:18:23 +0000 (-0700)
Subject: sender verification
X-Git-Url: https://git.mxchange.org/?a=commitdiff_plain;h=344f12c8c41e48c864eb0ae4c291bb9c87ac46d0;p=friendica.git

sender verification
---

diff --git a/zot.txt b/zot.txt
index 2a0b5f31df..3ad7295cc6 100644
--- a/zot.txt
+++ b/zot.txt
@@ -30,6 +30,7 @@ resolvable addresses containing both salmon and zot endpoints.
  <zot:key>((key))</zot:key>
  <zot:iv>((iv))</zot:iv>
  <zot:env>((envelope))</zot:env>
+ <zot:sig key_id="xxx">((envelope signature))</zot:sig>
  <zot:alg>AES-256-CBC</zot:alg>
  <zot:data type='application/magic-envelope+xml'>((salmon))</zot:data>
 </zot:msg>
@@ -115,6 +116,15 @@ the "owner" of the endpoint.
 ednpoint is defined elsewhere in this document. The bulk delivery agent
 will deliver to all local addresses found in the address lists. 
 
+zot:sig
+*******
+
+The Sender of the message signs the underlying salmon data in the manner 
+prescribed by salmon. If the Sender and From address are identical, the
+signature will be identical to the signature of the underlying salmon packet. 
+If they are different, this signature is verified with the Sender's public 
+key to verify the Sender. 
+
 zot:alg
 *******