A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Javascript Object Signing and Encryption
Working Group of the IETF.
Title : JWS Signing Input Options
Author : Michael B. Jones
Filename : draft-ietf-jose-jws-signing-input-options-00.txt
Pages : 11
Date : 2015-07-23
Abstract:
JSON Web Signature (JWS) represents the payload of a JWS as a
base64url encoded value and uses this value in the JWS Signature
computation. While this enables arbitrary payloads to be integrity
protected, some have described use cases in which the base64url
encoding is unnecessary and/or an impediment to adoption, especially
when the payload is large and/or detached. This specification
defines a means of accommodating these use cases by defining an
option to change the JWS Signing Input computation to not base64url-
encode the payload.
Also, JWS includes a representation of the JWS Protected Header and a
period ('.') character in the JWS Signature computation. While this
cryptographically binds the protected Header Parameters to the
integrity protected payload, some have described use cases in which
this binding is unnecessary and/or an impediment to adoption,
especially when the payload is large and/or detached. This
specification defines a means of accommodating these use cases by
defining an option to change the JWS Signing Input computation to not
include a representation of the JWS Protected Header and a period
('.') character in the JWS Signing Input.
These options are intended to broaden the set of use cases for which
the use of JWS is a good fit.
The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-jose-jws-signing-input-options/
There's also a htmlized version available at:
https://tools.ietf.org/html/draft-ietf-jose-jws-signing-input-options-00
Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.
Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/
_______________________________________________
jose mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/jose
