acme.signedorigin.dev

The honest merchant. Publishes a signed graph and a key in DNS.

A demonstration origin for Signed Origin. The graph is served at /.well-known/signed-origin.json; any key would resolve from DNS at _so.acme.signedorigin.dev.

Verification needs the payload, the signature, the public key and a clock. It contacts nothing else — no service operated by us sits in that path.

CANDIDATE — Signed Origin is a proposed specification, not a ratified standard. It is not endorsed by any standards body, protocol maintainer or agent platform. This is a test fixture; the merchant is fictional.