@erincandescent @evan @Gargron
I'm sorry if I'm being thick (and feel free to tell me) - but...
I get a signature with a keyID of `evil.com/evil#sig`
I get the public key from evil.com
I verify the time, digest, and signature all match.
The body of the message says actor example.com/edent Creates...
When / how do I then check that edent's public key is the same as the one in the keyID?
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.