I for one think this is interesting.

I have published two implementations of the draft James mentions,
draft-rundgren-json-canonicalization-scheme
<https://tools.ietf.org/html/draft-rundgren-json-canonicalization-scheme>, (
Java
<https://search.maven.org/artifact/io.github.erdtman/java-json-canonicalization/1.1/jar>
and JavaScript <https://www.npmjs.com/package/canonicalize>) and I know
Anders (the author of the draft) has implementations in .NET and Python too
(all working well together).

The I have my self been part in writing a draft that uses this
canonicalization mechanism to create signed cleartext JSON (
draft-erdtman-jose-cleartext-jws
<https://tools.ietf.org/html/draft-erdtman-jose-cleartext-jws-01>). I have
ported a JavaScript JOSE implementation to this new schema without any
issues and Anders has at least a Java implementation.

Finally there was a resent conversation about this subject on the OAuth
mailing-list
<https://mailarchive.ietf.org/arch/msg/oauth/YL29UE_gNj73mChXTr9FgkCF5Kg>
recently.

Best regards
//Samuel


On Thu, Oct 11, 2018 at 7:33 AM Neil Madden <[email protected]>
wrote:

>
> > On 11 Oct 2018, at 01:02, Bret Jordan <[email protected]> wrote:
> >
> >>
> >> Other implementations say that you should preserver the order of the
> fields you read when serialized which is part of JSON for the browser
> implementations but not necessarily elsewhere.
> >
> > Preserving order is hard.  Depending on your programming language you
> might be deserializing the content in to a struct or you may be using a
> map.
> >
> > What I need is a way for individuals and organizations to be able to
> pass around and share JSON data and collaboratively work on that JSON data
> and sign the parts that they have done.
>
> Have you considered Git with PGP-signed commits? It solves this use-case
> extremely well.
>
> — Neil
> _______________________________________________
> jose mailing list
> [email protected]
> https://www.ietf.org/mailman/listinfo/jose
>
_______________________________________________
jose mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/jose

Reply via email to