-
Notifications
You must be signed in to change notification settings - Fork 79
Information Messages
wmiaw edited this page Oct 3, 2014
·
1 revision
Personalized information such as news, personal communications, product details, or entertainment are not particularly time-sensitive and do not initiate changes in any entity or user state. However there is value in keeping the contents of this communication private from unintended observers. The client will initiate a request for this information and the server will respond.
This communication occurs between a trusted services network client and server.
Security Property | API Return Value | Reason |
---|---|---|
Encryption Required | true | The request may identify specific content or types of content the user is interested in. |
Integrity Protection Required | true | Data modification may result in a request for incorrect or invalid content. |
Non-Replayable Required | false | Requests are idempotent and do not cause any harm if replayed. |
Service Tokens Expected | false | No service tokens are expected. |
User Associated | stringUserAuthenticationData |
The request is made on behalf of the specific user. User authentication data must be provided if a user ID token does not already exist. |
Security Property | API Return Value | Reason |
---|---|---|
Encryption Required | true | The response will contain personalized content. |
Integrity Protection Required | true | Data modification may result in incorrect or invalid content being presented to the user. |
Non-Replayable Required | false | Responses are always non-replayable. |
Service Tokens Expected | false | The response is the last communication for this MSL transaction. Therefore no service tokens are expected in response to the response. |
User Associated | null null |
The trusted services response is not associated with a user. |
A Netflix Original Production
Tech Blog | Twitter @NetflixOSS | Jobs
- Introduction
- Encoding & Normalization
- Cryptography
- Versioning
- MSL Networks
- Entity Authentication
- User Authentication
- Key Exchange
- Service Tokens
- Messages
- Error Messages
- Application Security Requirements
- Protocol Implementation
- Configuration Guide