The vouch-for reply

The vouch-for reply is the response from the vouch-for server to the target server.

The vouch-for server is either the MAS or a delegated vouch-for server in a domain remote that is from the MAS domain.

The vouch-for reply contains the following information:

https://target-URL?PD-VFHOST=vouch-for-server&PD-VF=encrypted-token

The PD-VFHOST label identifies the server that performed the vouch-for operation. The receiving (target) server uses this information to select the correct key required to decrypt the vouch-for token. The PD-VF label identifies the encrypted token in the vouch-for reply URL.

For example:

https://w5.dB.com/index.html?PD-VFHOST=mas.dA.com&PD-VF=3qhe9fjkp...ge56wgb

Parent topic: The vouch-for request and reply