@techreport{rundgren-signed-http-requests-01, number = {draft-rundgren-signed-http-requests-01}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-rundgren-signed-http-requests/01/}, author = {Anders Rundgren}, title = {{Signed HTTP Requests (SHREQ)}}, pagetotal = 29, year = 2019, month = sep, day = 9, abstract = {The SHREQ specification describes how the JSON Web Signature (JWS) specification combined with the JSON Canonicalization Scheme (JCS), can be utilized to support HTTP based applications needing digitally signed requests. SHREQ is specifically tailored for Web applications using JSON as data interchange format. There is also a SHREQ scheme for HTTP requests that do not have a body ("payload") like GET. SHREQ was designed to be agnostic with respect to REST concepts versus traditional GET/POST schemes.}, }