From 344f12c8c41e48c864eb0ae4c291bb9c87ac46d0 Mon Sep 17 00:00:00 2001
From: Friendika <info@friendika.com>
Date: Wed, 31 Aug 2011 21:18:23 -0700
Subject: [PATCH] sender verification

---
 zot.txt | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/zot.txt b/zot.txt
index 2a0b5f31d..3ad7295cc 100644
--- a/zot.txt
+++ b/zot.txt
@@ -30,6 +30,7 @@ resolvable addresses containing both salmon and zot endpoints.
  <zot:key>((key))</zot:key>
  <zot:iv>((iv))</zot:iv>
  <zot:env>((envelope))</zot:env>
+ <zot:sig key_id="xxx">((envelope signature))</zot:sig>
  <zot:alg>AES-256-CBC</zot:alg>
  <zot:data type='application/magic-envelope+xml'>((salmon))</zot:data>
 </zot:msg>
@@ -115,6 +116,15 @@ the "owner" of the endpoint.
 ednpoint is defined elsewhere in this document. The bulk delivery agent
 will deliver to all local addresses found in the address lists. 
 
+zot:sig
+*******
+
+The Sender of the message signs the underlying salmon data in the manner 
+prescribed by salmon. If the Sender and From address are identical, the
+signature will be identical to the signature of the underlying salmon packet. 
+If they are different, this signature is verified with the Sender's public 
+key to verify the Sender. 
+
 zot:alg
 *******