@hellocoop/httpsig@2.0.0-alpha.1
Pre-release
Pre-release
Corrects the tracked draft revision. This package tracks draft-hardt-httpbis-signature-key-08, not -07.
-07 was published to the IETF datatracker on 2026-07-05 and was editorial — a paragraph in the Introduction citing AAuth and Email Verification. All the normative work this package implements lands in -08. 2.0.0-alpha.0 said -07 throughout, including in its bundled README and migration guide.
In particular the hwk alg parameter was forbidden in -06 and -07, and becomes required in -08. The break this package straddles is -07 → -08.
No functional change from 2.0.0-alpha.0 — 132 tests, same behaviour. Documentation and comments only.
Published under the alpha dist-tag; npm install @hellocoop/httpsig still gives you 1.x.
npm install @hellocoop/httpsig@alpha
See MIGRATING-2.0.md.