[Openid-specs-ab] jwk_url and jwk_encryption_url should refer to key sets, correct?

Nat Sakimura sakimura at gmail.com
Thu Dec 27 04:31:03 UTC 2012


Sent from iPad

2012/12/27 13:19、Mike Jones <Michael.Jones at microsoft.com> のメッセージ:

  Some places the OpenID Connect language makes it sound like jwk_url and
jwk_encryption_url refer to documents containing a single key in JWK format
whereas in other places the language makes it clear that they refer to JWK
Sets.  For instance, in Messages, several places in Messages it says “If
there are multiple keys in the referenced JWK document…”.

I assume that the places where it is ambiguous, the docs should be updated
to say that these refer to locations returning JWK Set documents.  Does
anyone disagree?

                                                            -- Mike
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20121227/06e2ccae/attachment.html>

More information about the Openid-specs-ab mailing list