tdpp
True if every parameter name in params is a plain name (A-Za-z0-9_).
Names go into the signed message as they are, not encoded, so a name that decodes to "rproto=https&topic" (sent as "rproto%3Dhttps%26topic=coffee") gives the same message as the two parameters "rproto=https&topic=coffee". Anyone holding a signed link could then hide parameters (topic, rproto, a /tx's flags) from the handlers, which look them up by name, and keep the signature valid. Only plain names can be signed or verified.