fix: reject duplicate Signature headers

This commit is contained in:
Lain Soykaf 2026-07-26 12:26:35 +04:00
commit 9df50eea82
No known key found for this signature in database
3 changed files with 97 additions and 14 deletions

View file

@ -1 +1 @@
Reject unsupported RFC 9421 inbox signatures instead of queueing a doomed failed-signature retry, allowing clients to fall back to legacy HTTP Signatures.
Reject unsupported or ambiguous inbox signatures instead of queueing a doomed failed-signature retry, allowing clients to fall back to legacy HTTP Signatures.