Skip to content

Commit

Permalink
Specify outer vs inner http layers
Browse files Browse the repository at this point in the history
  • Loading branch information
lusayaa authored Jan 14, 2025
1 parent 816de49 commit 35b7ab4
Showing 1 changed file with 11 additions and 6 deletions.
17 changes: 11 additions & 6 deletions FLEDGE_Key_Value_Server_API.md
Original file line number Diff line number Diff line change
Expand Up @@ -61,15 +61,20 @@ For more information on the design, please refer to [the trust model explainer](

![V2 API diagram](assets/fledge_kv_server_v2_api.png)

HTTPS is used to transport data. The method is `POST`.
The request contains an outer HTTP layer with an inner HTTP body that uses a repurposed [Oblivious HTTP](https://datatracker.ietf.org/doc/draft-ietf-ohai-ohttp/) encapsulation mechanism.

The HTTP POST body is encrypted.

#### Cleartext headers
### Outer HTTP layer
For the outer HTTP layer:
* HTTPS is used to transport data.
* The method is `POST`.
* Requests specify Content types via these headers:
```
Content-Type: message/ad-auction-trusted-signals-request
Accept: message/ad-auction-trusted-signals-response
```

Requests contain a cleartext HTTP `Content-Type` header with value `message/ad-auction-trusted-signals-request`.

Responses contain a cleartext HTTP `Content-Type` header with value `message/ad-auction-trusted-signals-response`.
### Inner HTTP layer

#### Encryption

Expand Down

0 comments on commit 35b7ab4

Please sign in to comment.