Merge 57c6273162 into 0b5db68242

changelogs/application_service/newsfragments/2330.clarification

@@ -0,0 +1 @@
+Fix various typos throughout the specification.

changelogs/client_server/newsfragments/2329.clarification

@@ -0,0 +1 @@
+Add link to JSON signing algorithm in server-server auth section for clarity. Contributed by @thetayloredman.

content/application-service-api.md

@@ -84,7 +84,7 @@ For the `users` namespace, application services can only register interest in
 homeserver). Events affecting users on other homeservers are not sent to an application
 service, even if the user happens to match the one of the `users` namespaces (unless,
 of course, the event affects a room that the application service is interested in
-for another room - for example, because there is another user in the room that the
+for another reason - for example, because there is another user in the room that the
 application service is interested in).
 
 For the `rooms` and `aliases` namespaces, all events in a matching room will be

content/server-server-api.md

@@ -277,12 +277,12 @@ queried from multiple servers to mitigate against DNS spoofing.
 
 Every HTTP request made by a homeserver is authenticated using public
 key digital signatures. The request method, target and body are signed
-by wrapping them in a JSON object and signing it using the JSON signing
+by wrapping them in a JSON object and signing it using the [JSON signing
-algorithm. The resulting signatures are added as an Authorization header
+algorithm](/appendices#signing-json). The resulting signatures are added
-with an auth scheme of `X-Matrix`. Note that the target field should
+as an Authorization header with an auth scheme of `X-Matrix`. Note that
-include the full path starting with `/_matrix/...`, including the `?`
+the target field should include the full path starting with `/_matrix/...`,
-and any query parameters if present, but should not include the leading
+including the `?` and any query parameters if present, but should not
-`https:`, nor the destination server's hostname.
+include the leading `https:`, nor the destination server's hostname.
 
 Step 1 sign JSON: