Updated JOSE and JWT specifications have been published that address the IESG review comments received. The one set of normative changes was to change the implementation requirements for RSAES-PKCS1-V1_5 from Required to Recommended- and for RSA-OAEP from Optional to Recommended+. Thanks to Richard Barnes, Alissa Cooper, Stephen Farrell, Brian Haberman, Ted Lemon, Barry Leiba, and Pete Resnick for their IESG review comments, plus thanks to Scott Brim and Russ Housley for additional Gen-ART review comments, and thanks to the working group members who helped respond to them. Many valuable clarifications resulted from your thorough reviews.
The specifications are available at:
- http://tools.ietf.org/html/draft-ietf-jose-json-web-signature-34
- http://tools.ietf.org/html/draft-ietf-jose-json-web-encryption-34
- http://tools.ietf.org/html/draft-ietf-jose-json-web-key-34
- http://tools.ietf.org/html/draft-ietf-jose-json-web-algorithms-34
- http://tools.ietf.org/html/draft-ietf-oauth-json-web-token-28
HTML formatted versions are available at:
- https://self-issued.info/docs/draft-ietf-jose-json-web-signature-34.html
- https://self-issued.info/docs/draft-ietf-jose-json-web-encryption-34.html
- https://self-issued.info/docs/draft-ietf-jose-json-web-key-34.html
- https://self-issued.info/docs/draft-ietf-jose-json-web-algorithms-34.html
- https://self-issued.info/docs/draft-ietf-oauth-json-web-token-28.html
Leave a Reply
You must be logged in to post a comment.