Subject: [Webpush] Adding a vapid challenge

From: Martin Thomson <[email-masked]>
Date: Thu, 17 Aug 2017 11:13:28 +1000

In Alexey's review of vapid, he raised a concern about a new HTTP
authentication scheme without a challenge.

In light of this concern, I've proposed adding a challenge.  It's a
trivial thing to do.

https://github.com/webpush-wg/webpush-vapid/pull/42

Just wanted to highlight this, in case the sudden increase in email
caused that bit to be lost.