<![CDATA[Re: @peertube/http-signature]]>@chocobozzz@framapiaf.org I have a question for you... I'm seeing in Are we HS2019 yet? that Peertube and Misskey both use your package: @peertube/http-signature

NodeBB currently rolls its own cavage-12 support but and I did some preliminary research into updating to the latest HTTP Signatures draft, but quickly got overwhelmed.

For a variety of reasons, but mainly to avoid NIH, I'd consider switching to a dependency.

My question is: does your library support verification for non-hs2019 signatures, or will I need to invoke your library in front, and fall back to existing cavage-12 verification otherwise?

I suppose, same question re: double-knocking.

]]>https://fedi.wiki/topic/993e4a15-e44b-458a-bfdc-8f90bfffc6fd/re-@peertube-http-signatureRSS for NodeMon, 25 May 2026 01:49:44 GMTWed, 13 May 2026 17:24:32 GMT60<![CDATA[Reply to Re: @peertube/http-signature on Thu, 21 May 2026 20:07:50 GMT]]>Thanks @chocobozzz@framapiaf.org for the explanation. It does seem like the library is still usable.

In a separate thread, @mradcliffe@nokoto.org mentioned that he had a PR/branch that introduced RFC 9421 support:

https://nokoto.org/user/3/replies/317

It looks like you're the maintainer... would you be open to having that merged if someone (aka me) implements and tests it?

]]>https://fedi.wiki/post/https://activitypub.space/post/1927https://fedi.wiki/post/https://activitypub.space/post/1927Thu, 21 May 2026 20:07:50 GMT<![CDATA[Reply to Re: @peertube/http-signature on Fri, 15 May 2026 12:54:29 GMT]]>@Chocobozzz thanks! I'll take a look at the library you linked to.

Also I'll figure out why your message didn't come through 🤔

]]>https://fedi.wiki/post/https://activitypub.space/post/1882https://fedi.wiki/post/https://activitypub.space/post/1882Fri, 15 May 2026 12:54:29 GMT<![CDATA[Reply to Re: @peertube/http-signature on Fri, 15 May 2026 12:51:17 GMT]]>Hi,

My answer seems to not have been received here so I copy the link: https://framapiaf.org/[@Chocobozzz](https://activitypub.space/user/chocobozzz)/116577305060483143

]]>https://fedi.wiki/post/https://activitypub.space/post/1881https://fedi.wiki/post/https://activitypub.space/post/1881Fri, 15 May 2026 12:51:17 GMT<![CDATA[Reply to Re: @peertube/http-signature on Fri, 15 May 2026 07:01:47 GMT]]>@julian Hi,

In fact peertube doesn't use this library anymore. We switched to https://github.com/misskey-dev/node-http-message-signatures

Ironically, Misskey still uses @peertube/http-signature.

The former dev of @misskey-dev/node-http-message-signatures expressed concerns about the maintenance status of the library: https://github.com/Chocobozzz/PeerTube/issues/7372

However, upon reviewing it, I found no issues or security considerations with the library. @peertube/http-signature (based on https://github.com/TritonDataCenter/node-http-signature) isn't really maintained either

]]>https://fedi.wiki/post/https://framapiaf.org/users/Chocobozzz/statuses/116577305060483143https://fedi.wiki/post/https://framapiaf.org/users/Chocobozzz/statuses/116577305060483143Fri, 15 May 2026 07:01:47 GMT