The IETF draft commentators have noted that while the specification suggests signing the URL, it does not specify how. This was done deliberately, but this issue will be open to track further consideration of whether it would be helpful or not to offer guidance to implementors on suggestions for how to best sign URL parameters.
The IETF draft commentators have noted that while the specification suggests signing the URL, it does not specify how. This was done deliberately, but this issue will be open to track further consideration of whether it would be helpful or not to offer guidance to implementors on suggestions for how to best sign URL parameters.