What are various errors related to keys?

w3c / webpayments-methods-tokenization

https://w3c.github.io/webpayments-methods-tokenization/index.html

Other

15 stars 15 forks source link

What are various errors related to keys? #43

Open ianbjacobs opened 6 years ago

ianbjacobs commented 6 years ago

Because encryption is likely to play an important role in this specification, what are the various errors that one might encounter around keys? For example:

Attempt to fetch a key fails.
Incorrect key type. (This might be dealt with in the encryption spec.)

Others?

Ian

stpeter commented 6 years ago

Some other possibilities:

Expired key
Invalid / malformed key
Invalid scope/usage (e.g., encrypt-only key used for encrypt-and-sign - this might be your key type error)
Invalid chain (however I'm not sure if we'll use CA-issued keys)
Unsupported algorithm
Mismatched key (wrong intended recipient)

ianbjacobs commented 6 years ago

To look further into, the x5u parameter in JWK: https://tools.ietf.org/html/rfc7517#section-4.6