1
 2Some notes about security.
 3
 4honk is not currently hardened against SSRF, server side request forgery. Be
 5mindful of what else may be reachable on localhost or the local network if
 6it's not generally accessible.
 7
 8How are user keys supposed to be rotated? Expired? Revoked?
 9
10The current answer is never, never, never.
11
12If the key is only used for signing http requests, it can be be changed
13basically at will. Change the key in the actor, give it a new name (to avoid
14conflict with any cached keys), carry on.
15
16Using keys to sign json is more complicated. The current practice is to name
17keys with URL fragments. example.com/user#key. If the keyname is changed to
18#newkey, how does one fetch the old key to verify existing data?