On Wed, Sep 5, 2018 at 12:53 PM Salz, Rich <rs...@akamai.com> wrote: > > - Because being generous in what you receive is harmful. > > https://tools.ietf.org/html/draft-iab-protocol-maintenance-00 > <https://urldefense.proofpoint.com/v2/url?u=https-3A__tools.ietf.org_html_draft-2Diab-2Dprotocol-2Dmaintenance-2D00&d=DwMFaQ&c=96ZbZZcaMF4w0F4jpN6LZg&r=4LM0GbR0h9Fvx86FtsKI-w&m=lYcerr09XhdsUaFXXMZLv4sAfq3r-Nc2uKhaYjnBdpc&s=h1H5m5ejvoDCu-6t_gPl7-6njuU6OH8bsBhq-cGF6Zo&e=> > > > > Sorry, I disagree with King Martin in this case. :) > > > > I think mandating a specific requrest body is hard to get right. >
Can you point to an implementation framework where this would be difficult? AFAIK, every JSON library out there marshalls {} as "{}", with no whitespace, and every JOSE library signs whatever string you give it.
_______________________________________________ Acme mailing list Acme@ietf.org https://www.ietf.org/mailman/listinfo/acme