search

TBD54566975 / tbdex

56 stars 25 forks source link

Consider removing DID from `kid` of signature #156

Closed mistermoe closed 8 months ago

mistermoe commented 1 year ago

DID is already present in metadata.from and it's already a detached payload JWS so you have to have the rest of the message to verify the signature anyway

decentralgabe commented 10 months ago

it would be good to have the fully qualified kid (e.g. did:example:123#key-1) in there so just by looking at the JWS you can resolve the key material

mistermoe commented 8 months ago

agreed @decentralgabe . closing this out