Thank you for the replies.
(Omitting unicast CCs by request)
It seems that
1) /.well-known/jwks.json might not be in as common use as I thought, but
maybe OAUTH types might want to register it so as to reduce surprise in
the future.
2) We, ANIMA, should probably have two or three RFC7517
On Tue, Jul 12, 2022 at 09:46:01PM +0200, Warren Parad wrote:
> I don't know if this is relevant, but jwks.json isn't registered, because
> it doesn't have to be at that location. The
> /.well-known/openid-configuration discovery document, which is registered,
> uses the jwks_uri property to specif