It's been my assumption that this option would only be used for detached
payloads, in which the payload is transmitted and delimited in a way known to
the application.
As a historical note, the signature comes last in the JWS Compact Serialization
to enable computing it in a streaming manner, for algorithms where this is
possible.
-- Mike
-----Original Message-----
From: jose [mailto:[email protected]] On Behalf Of Martin Thomson
Sent: Wednesday, March 25, 2015 2:32 PM
To: Jim Schaad
Cc: Phillip Hallam-Baker; jose
Subject: Re: [jose] Direct Compact Serialization
On 25 March 2015 at 14:10, Jim Schaad <[email protected]> wrote:
> So what happens if my JWS Payload contains a "." character in it?
Yes, this seems to be a problem.
You could fix it trivially by moving the signature ahead of the payload in the
serialization. At the cost of having to buffer the signature.
_______________________________________________
jose mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/jose
_______________________________________________
jose mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/jose
