search

peppelinux / draft-demarco-oauth-status-assertions

OAuth 2.0 Status Assertions for Digital Credentials
Other
4 stars 4 forks source link

credential_pop kid #19

Closed fmarino-ipzs closed 3 weeks ago

fmarino-ipzs commented 4 months ago

We should generalize the key identifier by adding:

Only one of them MUST be used.

OR13 commented 4 months ago

Not info info on this issue to fully follow the request.

when using cnf claim in the COSE or JOSE Payload, typically you would have:

MUST support "cnf": { "jwk": ...}} MAY support "cnf": { "kid": ...}}

When referring to the issuer's signing keys for the credential in the protected header, typically you would have:

MUST support "kid": ... MAY support "x5t": ... MAY support "jwk": ...

I would not recommend x5c in protected headers at this point, for new specs.

peppelinux commented 3 weeks ago

Resolved by https://github.com/peppelinux/draft-demarco-oauth-status-assertions/pull/56/files