You need to sign in or sign up before continuing.
Reconsider mechanism now that KUDOS is stabilizing
The nonce transported in KUDOS could be a suitable replacement for the Request-Hash option as we have it now. Granted, we lose a bit in the more generic applications of Request-Hash (but they're largely hypothetical), but we gain that we don't need to invent our own key derivation mechanism.
This will need a bit of help from KUDOS to support long(er) nonces, but all in all this should still be a simplification.