Signature: Add created and expires headers

[obenland]

Not sure yet whether that is a good idea. It's possible we'd have to add double-knocking to even have this work?

Proposed changes:

Other information:

• [ ] Have you written new tests for your changes, if applicable?

Testing instructions:

• Go to '..'

Changelog entry

• [ ] Automatically create a changelog entry from the details below.

Changelog Entry Details

Significance

• [ ] Patch
• [ ] Minor
• [ ] Major

Type

• [ ] Added - for new features
• [ ] Changed - for changes in existing functionality
• [ ] Deprecated - for soon-to-be removed features
• [ ] Removed - for now removed features
• [ ] Fixed - for any bug fixes
• [ ] Security - in case of vulnerabilities

Message

[pfefferle]

I am not sure about the benefit!?!

[pfefferle]

Is it a good idea to use hs2019? What I understand in the discussions to the signature PRs is, that this is not properly supported and differently implemented yet?

The whole signature part is very crucial and might break interoperability, so I would be very conservative with it!

Otherwise we would have to test it with a lot of platforms!

[obenland]

Agreed, like I said in the PR description, Not sure yet whether that is a good idea.

I think there's an opportunity to simplify generate_signature, but that can be done when we work on that part for RFC-9421.