VAPID (Voluntary Application Server Identification for Web Push)

E856239

VAPID (Voluntary Application Server Identification for Web Push) is a mechanism that lets web push application servers identify themselves to push services using signed JSON Web Tokens, enabling authenticated and more controlled push messaging.

All labels observed (3)

How this entity was disambiguated

Statements (49)

Predicate Object
instanceOf application server identification mechanism ⓘ
web push authentication mechanism ⓘ
abbreviationFor Voluntary Application Server Identification for Web Push ⓘ
appliesTo Web Push protocol ⓘ
benefits better management of push traffic by push services ⓘ
improved accountability of push senders ⓘ
simplified authentication compared to per-subscription credentials ⓘ
category authentication protocol ⓘ
web push standard ⓘ
web security mechanism ⓘ
complements Web Push message encryption (RFC 8291) ⓘ
definedIn RFC 8292 ⓘ
doesNotProvide end-to-end content encryption ⓘ
enables abuse detection by push services ⓘ
access control by push services ⓘ
contact information inclusion in push requests ⓘ
rate limiting per application server ⓘ
sender authentication for push messages ⓘ
voluntary identification of application servers to push services ⓘ
fullName Voluntary Application Server Identification for Web Push ⓘ
headerTransport Authorization HTTP header ⓘ
Crypto-Key HTTP header ⓘ
isVoluntary true ⓘ
keyType EC P-256 public key ⓘ
protocolLayer application layer ⓘ
relatedTo HTTP Web Push protocol ⓘ
JSON Web Token ⓘ
Public Key Infrastructure ⓘ
Push API ⓘ
Web Push API ⓘ
linked to: Push API
requires application server key pair generation ⓘ
push service support for VAPID ⓘ
scope communication between application server and push service ⓘ
securityProperty integrity of identification data ⓘ
server authentication ⓘ
standardizedBy IETF ⓘ
tokenAudience push service origin ⓘ
tokenClaim audience (aud) ⓘ
expiration time (exp) ⓘ
subject (sub) ⓘ
tokenType signed JWT ⓘ
usedFor authenticating web push application servers ⓘ
authorizing push message sending ⓘ
controlling web push messaging ⓘ
identifying web push application servers ⓘ
uses ES256 signature algorithm ⓘ
JSON Web Token ⓘ
elliptic curve keys ⓘ
public key cryptography ⓘ

How these facts were elicited

Referenced by (4)

Full triples — surface form annotated when it differs from this entity's canonical label.

Push API → typicallyUsedWith → VAPID (Voluntary Application Server Identification for Web Push) ⓘ
VAPID → fullName → Voluntary Application Server Identification for Web Push ⓘ
linked to: VAPID (Voluntary Application Server Identification for Web Push)
VAPID → abbreviationFor → Voluntary Application Server Identification for Web Push ⓘ
linked to: VAPID (Voluntary Application Server Identification for Web Push)
VAPID → appliesTo → Web Push protocol ⓘ
linked to: VAPID (Voluntary Application Server Identification for Web Push)