Open cyberphone opened 7 years ago
It is imaginable rather representing entries in trustAnchors
as objects
{
"s256": "0fCrhFwZRU_ea7lUWwRi3HkuyT2yF9IxN5xKh2khjlk",
"url": "https://example.com/trustme.cer"
}
where s256
would hold the anticipated SHA256 of the DER encoded X.509 certificate featured on url
.
In order to make Merchant on-boarding simpler,
ProviderAuthority
objects could be augmented with trust anchors:The assumption is that signatures must contain all certificates except for the trust anchor.