Can be rendered with https://bramp.github.io/js-sequence-diagrams/
Very much a brainstorm.
Based on thoughts from @blaine: http://www.slideshare.net/Blaine/social-privacy-for-http-over-webfinger and http://blog.romeda.org/2011/03/private-webhooks-private-feeds.html
But adapted somewhat to the current IndieWeb ideas.
| Title: Private Messaging With From: | |
| participant alice | |
| participant bob | |
| participant wm.bob | |
| participant hub.alice | |
| alice->bob: 1. discover webmention\nendpoint | |
| alice->wm.bob: 2. send webmention | |
| wm.bob->alice: 3. verify webmention | |
| alice-->wm.bob: 401 unauthorized | |
| wm.bob->alice: 4. discover PubSubHubbub endpoint | |
| wm.bob->hub.alice: 5. one-off PuSH subscribe\nto private message URL\nwith "From: bob" header | |
| hub.alice->bob: 6. verify delegation to ensure\nthat wm.bob can fetch for bob | |
| hub.alice->wm.bob: 7. Push the message on\nsubscription success |