Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add version to the aggregation coordinator pubic key endpoint #1

Open
wants to merge 1 commit into
base: fixFencedFrame
Choose a base branch
from
Open

Add version to the aggregation coordinator pubic key endpoint #1

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 3 additions & 1 deletion AGGREGATE.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -308,7 +308,7 @@ shared.
The encryption will use public keys specified by the aggregation service. The
browser will encrypt payloads just before the report is sent by fetching the
public key endpoint (the aggregation service coordinator origin at the path
`/.well-known/aggregation-service/public-keys`) with an un-credentialed request. The processing origin will
`/.well-known/aggregation-service/v1/public-keys`) with an un-credentialed request. The processing origin will
respond with a set of keys which will be stored according to standard HTTP
caching rules, i.e. using Cache-Control headers to dictate how long to store the
keys for (e.g. following the [freshness
Expand All @@ -329,6 +329,8 @@ encoded public keys is as follows:
}
```

Note: The version in the `.well-known` path may change.

To limit the impact of a single compromised key, multiple keys (up to a small
limit) can be provided. The browser should independently pick a key uniformly at
random for each payload it encrypts to avoid associating different reports.
Expand Down
2 changes: 1 addition & 1 deletion index.bs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3272,7 +3272,7 @@ To <dfn>obtain the public key for encryption</dfn> given an [=aggregation coordi
1. Set |url|'s [=url/scheme=] to |aggregationCoordinator|'s [=origin/scheme=].
1. Set |url|'s [=url/host=] to |aggregationCoordinator|'s [=origin/host=].
1. Set |url|'s [=url/port=] to |aggregationCoordinator|'s [=origin/port=].
1. Set |url|'s [=url/path=] to «"`.well-known`", "`aggregation-service`", "`public-keys`"».
1. Set |url|'s [=url/path=] to «"`.well-known`", "`aggregation-service`", "`v1`", "`public-keys`"».
1. Return a user-agent-determined public key from |url| or an error in the event that the user
agent failed to obtain the public key from |url|. This step may be asynchronous.

Expand Down