{"action":"created","issue":{"url":"https://api.github.com/repos/solid/solid-spec/issues/5","labels_url":"https://api.github.com/repos/solid/solid-spec/issues/5/labels{/name}","comments_url":"https://api.github.com/repos/solid/solid-spec/issues/5/comments","events_url":"https://api.github.com/repos/solid/solid-spec/issues/5/events","html_url":"https://github.com/solid/solid-spec/issues/5","id":70641828,"number":5,"title":"WebID RSA - some questions","user":{"login":"bblfish","id":124506,"avatar_url":"https://avatars.githubusercontent.com/u/124506?v=3","gravatar_id":"","url":"https://api.github.com/users/bblfish","html_url":"https://github.com/bblfish","followers_url":"https://api.github.com/users/bblfish/followers","following_url":"https://api.github.com/users/bblfish/following{/other_user}","gists_url":"https://api.github.com/users/bblfish/gists{/gist_id}","starred_url":"https://api.github.com/users/bblfish/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bblfish/subscriptions","organizations_url":"https://api.github.com/users/bblfish/orgs","repos_url":"https://api.github.com/users/bblfish/repos","events_url":"https://api.github.com/users/bblfish/events{/privacy}","received_events_url":"https://api.github.com/users/bblfish/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":21,"created_at":"2015-04-24T09:43:35Z","updated_at":"2015-09-18T18:26:41Z","closed_at":null,"body":"I think this is in general a very good idea and will be needed for HTTP2.0 as TLS cannot be used there.\r\nIt does require cryptography in the browser, as I understand. Which browsers support those? Do we know what the UIs for those look like currently? How does the user select a public key to authenticate with? It would be good to have a section dedicated to that - a wiki page perhaps. And the particular protocol could be specified on the [WebID Specs](http://www.w3.org/2005/Incubator/webid/spec/) page.\r\n\r\nSecond as a WebID can have more than one key, my guess is that the browser has to send the public key as a link or in the header to the server. Otherwise the server needs to test each WebKey listed in the WebID Profile, and there may be a few. \r\n\r\nI think there could be a better name too. RSA is a cryptographic algorithm, whereas what you are defining here is a protocol. Perhaps\r\n \r\n* WebID-Token-Auth\r\n* WebID-JS-Auth\r\n* ..."},"comment":{"url":"https://api.github.com/repos/solid/solid-spec/issues/comments/141526333","html_url":"https://github.com/solid/solid-spec/issues/5#issuecomment-141526333","issue_url":"https://api.github.com/repos/solid/solid-spec/issues/5","id":141526333,"user":{"login":"bblfish","id":124506,"avatar_url":"https://avatars.githubusercontent.com/u/124506?v=3","gravatar_id":"","url":"https://api.github.com/users/bblfish","html_url":"https://github.com/bblfish","followers_url":"https://api.github.com/users/bblfish/followers","following_url":"https://api.github.com/users/bblfish/following{/other_user}","gists_url":"https://api.github.com/users/bblfish/gists{/gist_id}","starred_url":"https://api.github.com/users/bblfish/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bblfish/subscriptions","organizations_url":"https://api.github.com/users/bblfish/orgs","repos_url":"https://api.github.com/users/bblfish/repos","events_url":"https://api.github.com/users/bblfish/events{/privacy}","received_events_url":"https://api.github.com/users/bblfish/received_events","type":"User","site_admin":false},"created_at":"2015-09-18T18:26:41Z","updated_at":"2015-09-18T18:26:41Z","body":"Ah thanks. I was not aware of http-auth. "}}