<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:24.0pt;
mso-margin-bottom-alt:auto;
margin-left:24.0pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
background:#CCCCCC;
font-size:12.0pt;
font-family:"Courier New";
color:black;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:"Courier New";
color:black;
background:#CCCCCC;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">The top-level format continues to be an array of keys. Individual keys can also be used where appropriate. In the following example, an array of keys is specified:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="background:#CCCCCC"><span lang="EN" style="font-family:"Courier New";color:black">{"keys":<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#CCCCCC"><span lang="EN" style="font-family:"Courier New";color:black"> [<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#CCCCCC"><span lang="EN" style="font-family:"Courier New";color:black"> {"alg":"EC",<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#CCCCCC"><span lang="EN" style="font-family:"Courier New";color:black"> "crv":"P-256",<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#CCCCCC"><span lang="EN" style="font-family:"Courier New";color:black"> "x":"MKBCTNIcKUSDii11ySs3526iDZ8AiTo7Tu6KPAqv7D4",<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#CCCCCC"><span lang="EN" style="font-family:"Courier New";color:black"> "y":"4Etl6SRW2YiLUrN5vfvVHuhp7x8PxltmWWlbbM4IFyM",<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#CCCCCC"><span lang="EN" style="font-family:"Courier New";color:black"> "use":"enc",<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#CCCCCC"><span lang="EN" style="font-family:"Courier New";color:black"> "kid":"1"},<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#CCCCCC"><span lang="EN" style="font-family:"Courier New";color:black"><o:p> </o:p></span></p>
<p class="MsoNormal" style="background:#CCCCCC"><span lang="EN" style="font-family:"Courier New";color:black"> {"alg":"RSA",<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#CCCCCC"><span lang="EN" style="font-family:"Courier New";color:black"> "mod": "0vx7agoebGcQSuuPiLJXZptN9nndrQmbXEps2aiAFbWhM78LhWx<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#CCCCCC"><span lang="EN" style="font-family:"Courier New";color:black">4cbbfAAtVT86zwu1RK7aPFFxuhDR1L6tSoc_BJECPebWKRXjBZCiFV4n3oknjhMs<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#CCCCCC"><span lang="EN" style="font-family:"Courier New";color:black">tn64tZ_2W-5JsGY4Hc5n9yBXArwl93lqt7_RN5w6Cf0h4QyQ5v-65YGjQR0_FDW2<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#CCCCCC"><span lang="EN" style="font-family:"Courier New";color:black">QvzqY368QQMicAtaSqzs8KJZgnYb9c7d0zgdAZHzu6qMQvRL5hajrn1n91CbOpbI<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#CCCCCC"><span lang="EN" style="font-family:"Courier New";color:black">SD08qNLyrdkt-bFTWhAI4vMQFh6WeZu0fM4lFd2NcRwr3XPksINHaQ-G_xBniIqb<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#CCCCCC"><span lang="EN" style="font-family:"Courier New";color:black">w0Ls1jF44-csFCur-kEgU8awapJzKnqDKgw",<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#CCCCCC"><span lang="EN" style="font-family:"Courier New";color:black"> "exp":"AQAB",<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#CCCCCC"><span lang="EN" style="font-family:"Courier New";color:black"> "kid":"2011-04-29"}<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#CCCCCC"><span lang="EN" style="font-family:"Courier New";color:black"> ]<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#CCCCCC"><span lang="EN" style="font-family:"Courier New";color:black">}<o:p></o:p></span></p>
<p class="MsoNormal"><a name="anchor3"></a><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">In this example, a single key is specified:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="background:#CCCCCC"><span lang="EN" style="font-family:"Courier New";color:black"> {"alg":"EC",<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#CCCCCC"><span lang="EN" style="font-family:"Courier New";color:black"> "crv":"P-256",<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#CCCCCC"><span lang="EN" style="font-family:"Courier New";color:black"> "x":"MKBCTNIcKUSDii11ySs3526iDZ8AiTo7Tu6KPAqv7D4",<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#CCCCCC"><span lang="EN" style="font-family:"Courier New";color:black"> "y":"4Etl6SRW2YiLUrN5vfvVHuhp7x8PxltmWWlbbM4IFyM",<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#CCCCCC"><span lang="EN" style="font-family:"Courier New";color:black"> "use":"enc",<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#CCCCCC"><span lang="EN" style="font-family:"Courier New";color:black"> "kid":"1"}<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">The array format is used in contexts such as the key values retrieved for the JWS and JWE “jku” parameter where multiple keys may be specified. The single
key format is used in contexts such as the JWE “epk” parameter, where only a single key value is called for.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">If this isn’t clear, feel free to ask a follow-up question.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> Best wishes,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> -- Mike<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> openid-specs-ab-bounces@lists.openid.net [mailto:openid-specs-ab-bounces@lists.openid.net]
<b>On Behalf Of </b>Dingwell, Robert A.<br>
<b>Sent:</b> Wednesday, June 27, 2012 9:04 AM<br>
<b>To:</b> openid-specs-ab@lists.openid.net<br>
<b>Subject:</b> [Openid-specs-ab] JWK clarification<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:black">If I remember correctly the initial version of the JWK format specified the format as being an array of keys but the latest version of the JWK spec appears to
have broken that idea out to where there is the key format and set format. <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:black">As both the client and the server have the option of providing signing and encrypting keys in JWK format are the urls for those keys intended to be a single JWK
or a JWK set? Seeing how the specifications states that if both X509 and JWK urls are provided they must be the same key makes me believe that the url would point to a single key. If it is a set how would one determine which key to use in the set considering
that the set could contain a number of keys that are marked as signing or encrypting keys?<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:black">Rob<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:black"><o:p> </o:p></span></p>
</div>
</div>
</body>
</html>