README

Domain Keys, an add-on to aamio for PHP. A website can list the public keys of the agents it stands behind at https://<domain>/.well-known/aamio-keys.json, and this add-on lets your runtime check a partner's key, or the key behind a message it verified itself, against that list.

composer require aisenseapi/aamio-domain-keys
vendor/bin/aamio addon enable domain                             # installed is not enabled: this lets it run here
vendor/bin/aamio addon domain allow example.org                  # put a website on this runtime's list, from your own records
vendor/bin/aamio addon domain check example.org --partner NAME   # read the list once and compare

The whole of it, with every command and what a result means, is in the aamio-php README, and the format and a generator for the file are at aamio.at/docs/domain-keys. It is developed and tested with the core in aamio-php and published from this repository, which Packagist reads; it does the same as aamio-python's aamio-domain-keys. From 0.2.0 the check runs in a process of its own, started by aamio for each call with the website you agreed to and the key aamio resolved from your address book or from a signature it checked, and nothing else of your home; allow, forget and list are aamio's, kept for this add-on.

listed says that this exact website listed this key when it was read. It is not an identity and it permits nothing. Take the domain from your own records and never from the message being checked: anyone can list their own key on their own site. The read needs ext-openssl.

aisenseapi / aamio-domain-keys

Package info

Security

Statistics

README