Confirmed users
9,511
edits
| Line 58: | Line 58: | ||
== Notes + Questions: == | == Notes + Questions: == | ||
* From https://github.com/mozilla-services/stubattribution/pull/20/files: "If set, the `attribution_code` parameter will be verified by validating that the `attribution_sig` parameter matches the hex-encoded sha256 hmac of `attribution_code` using`HMAC_KEY`." | |||
* From oremj: "we want every unique group of four attribution code parameters to point at the same url; so for source=google, campaign=foo, source=foo, medium=foo... attribution_code and attribution_sig should always be the same" | * From oremj: "we want every unique group of four attribution code parameters to point at the same url; so for source=google, campaign=foo, source=foo, medium=foo... attribution_code and attribution_sig should always be the same" | ||
* From me: "and right now, looks like attribution_sig is a timestamped + more hashed value" | * From me: "and right now, looks like attribution_sig is a timestamped + more hashed value" | ||