diff --git a/specification/30_server_server_api.rst b/specification/30_server_server_api.rst index 94cd4169..d88225d5 100644 --- a/specification/30_server_server_api.rst +++ b/specification/30_server_server_api.rst @@ -383,7 +383,7 @@ Authentication Request Authentication ~~~~~~~~~~~~~~~~~~~~~~ -Every HTTP request made by a homesever is authenticated using public key +Every HTTP request made by a homeserver is authenticated using public key digital signatures. The request method, target and body are signed by wrapping them in a JSON object and signing it using the JSON signing algorithm. The resulting signatures are added as an Authorization header with an auth scheme