{"id":1446,"date":"2015-09-08T11:31:44","date_gmt":"2015-09-08T18:31:44","guid":{"rendered":"https:\/\/self-issued.info\/?p=1446"},"modified":"2015-09-08T11:56:50","modified_gmt":"2015-09-08T18:56:50","slug":"json-web-key-jwk-thumbprint-is-now-rfc-7638","status":"publish","type":"post","link":"https:\/\/self-issued.info\/?p=1446","title":{"rendered":"JSON Web Key (JWK) Thumbprint is now RFC 7638"},"content":{"rendered":"<p><span class=\"plain\"><img decoding=\"async\" align=\"right\" src=\"https:\/\/self-issued.info\/images\/ietf-logo.png\" alt=\"IETF logo\"\/><\/span>The JSON Web Key (JWK) Thumbprint specification is now <a href=\"http:\/\/www.rfc-editor.org\/info\/rfc7638\">RFC 7638<\/a> &#8212; an IETF standard.  The abstract describes the specification as follows:<\/p>\n<blockquote><p>\nThis specification defines a method for computing a hash value over a JSON Web Key (JWK). It defines which fields in a JWK are used in the hash computation, the method of creating a canonical form for those fields, and how to convert the resulting Unicode string into a byte sequence to be hashed. The resulting hash value can be used for identifying or selecting the key represented by the JWK that is the subject of the thumbprint.\n<\/p><\/blockquote>\n<p>Thanks to <a href=\"https:\/\/www.linkedin.com\/pub\/james-manger\/3b\/561\/979\">James Manger<\/a>, <a href=\"http:\/\/www.thread-safe.com\/\">John Bradley<\/a>, and <a href=\"http:\/\/nat.sakimura.org\/\">Nat Sakimura<\/a>, all of whom participated in security discussions that led to the creation of this specification.  Thanks also to the <a href=\"http:\/\/datatracker.ietf.org\/wg\/jose\/charter\/\">JOSE working group<\/a> members, chairs, area directors, and other IETF members who contributed to the specification.<\/p>\n<p>A JWK Thumbprint is used as the &#8220;<code>sub<\/code>&#8221; (subject) claim value in <a href=\"http:\/\/openid.net\/specs\/openid-connect-core-1_0.html#SelfIssuedResponse\">OpenID Connect self-issued ID Tokens<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The JSON Web Key (JWK) Thumbprint specification is now RFC 7638 &#8212; an IETF standard. The abstract describes the specification as follows: This specification defines a method for computing a hash value over a JSON Web Key (JWK). It defines which fields in a JWK are used in the hash computation, the method of creating [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[28,27,14,25],"tags":[],"class_list":["post-1446","post","type-post","status-publish","format-standard","hentry","category-cryptography","category-json","category-openid","category-specifications"],"_links":{"self":[{"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/posts\/1446","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/self-issued.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1446"}],"version-history":[{"count":5,"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/posts\/1446\/revisions"}],"predecessor-version":[{"id":1451,"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/posts\/1446\/revisions\/1451"}],"wp:attachment":[{"href":"https:\/\/self-issued.info\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1446"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/self-issued.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1446"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/self-issued.info\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1446"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}