Slightly updated JSON Object Signing and Encryption (JOSE) and JSON Web Token (JWT) drafts have been published that address the last of the IESG review comments, which were follow-up comments by Stephen Farrell and Pete Resnick. All DISCUSS comments had already been addressed by the previous drafts. The one normative change is that implementations must now discard RSA private keys with an “oth” parameter when the implementation does not support private keys with more than two primes. The remaining changes were editorial improvements suggested by Pete.
The specifications are available at:
- http://tools.ietf.org/html/draft-ietf-jose-json-web-signature-38
- http://tools.ietf.org/html/draft-ietf-jose-json-web-encryption-38
- http://tools.ietf.org/html/draft-ietf-jose-json-web-key-38
- http://tools.ietf.org/html/draft-ietf-jose-json-web-algorithms-38
- http://tools.ietf.org/html/draft-ietf-oauth-json-web-token-32
HTML formatted versions are available at:
- https://self-issued.info/docs/draft-ietf-jose-json-web-signature-38.html
- https://self-issued.info/docs/draft-ietf-jose-json-web-encryption-38.html
- https://self-issued.info/docs/draft-ietf-jose-json-web-key-38.html
- https://self-issued.info/docs/draft-ietf-jose-json-web-algorithms-38.html
- https://self-issued.info/docs/draft-ietf-oauth-json-web-token-32.html
Leave a Reply
You must be logged in to post a comment.