Some feedback about my Amazon Product Advertising API Signature Generator (yes, I know it needs a better name) has caused me to look at URL encoding in more detail than I ever have before, and it turns out it’s not as straightforward as you might think.
From 15th August 2009, all requests to Amazon’s Product Advertising API must be authenticated with a message authentication code. This requires that a signature be generated using your secret key and appended to the request. When Amazon get the request, they calculate the signature themselves, and if it matches the signature you sent they know that the message is […]