Merge pull request #298 from nyaxt/chlog

Update Change Log entries

draft-yasskin-http-origin-signed-responses.md

@@ -1935,6 +1935,16 @@ draft-05
 * Refer to draft-yasskin-httpbis-origin-signed-exchanges-impl for draft version
   numbers.
 * Require `exchange`'s response to be complete and cachable by a shared cache.
+* Define the "integrity" field of the Signature header to include subfields of
+  the main integrity-protecting header, including the digest algorithm.
+* Put a fallback URL at the beginning of the `application/signed-exchange`
+  format, which replaces the ':url' key from the CBOR representation of the
+  exchange's request and response metadata and headers.
+* Make the signed message format a concatenation of byte sequences, which helps
+  implementations avoid re-serializing the exchange's request and response
+  metadata and headers.
+* Explicitly check the response payload's integrity instead of assuming the
+  client did it elsewhere in processing the response.
 
 draft-04