Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Identifying NotificationReceiver #153

Open
csarven opened this issue Feb 3, 2023 · 1 comment
Open

Identifying NotificationReceiver #153

csarven opened this issue Feb 3, 2023 · 1 comment
Labels
Milestone

Comments

@csarven
Copy link
Member

csarven commented Feb 3, 2023

Action of https://github.com/solid/notifications-panel/blob/main/meetings/2023-02-02.md#add-ldn-channel-2023-ed .

In https://solid.github.io/notifications/protocol , it is possible to indicate a NotificationServer with the notify:sender property.

The proposal is to introduce the notify:receiver property to indicate a NotificationReceiver.

#147 proposes to add vocab and JSON-LD context with:

#http://www/w3.org/ns/solid/notifications
notify:receiver
    a rdf:Property ;
    rdfs:label "receiver"@en ;
    rdfs:comment "The property used to identify the party that receives notifications."@en ;
    rdfs:isDefinedBy <http://www.w3.org/ns/solid/notifications#> ;
    vs:term_status "testing" .

#https://www.w3.org/ns/solid/notification/v1
    "receiver": {
      "@id": "notify:receiver",
      "@type": "@id" },
@csarven csarven added the model label Feb 3, 2023
@csarven csarven added this to the 0.3 milestone Feb 16, 2023
@elf-pavlik
Copy link
Member

As discussed during the last meeting for cases where the subscription was made by a malicious party, intending to spam the receiver, we can't trust any information in the subscription request. The sendTo channel receiver could be discoverable by following one's nose from the sendTo URI. This could also be used to verify if the Subscription Client was authorized by the receiver to create a subscription on their behalf in the first place.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants