<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:tahoma,new york,times,serif;font-size:10pt"><div>Hi Mike,<br><br>You're right. It should say "used to validate the ID Token signature".<br><br><br>-- Edmund<br></div><div style="font-family:tahoma, new york, times, serif;font-size:10pt"><br><div style="font-family:times new roman, new york, times, serif;font-size:12pt"><font face="Tahoma" size="2"><hr size="1"><b><span style="font-weight: bold;">From:</span></b> Mike Jones <Michael.Jones@microsoft.com><br><b><span style="font-weight: bold;">To:</span></b> Edmund Jay <ejay@mgi1.com><br><b><span style="font-weight: bold;">Cc:</span></b> "openid-specs-ab@lists.openid.net" <openid-specs-ab@lists.openid.net><br><b><span style="font-weight: bold;">Sent:</span></b> Mon, June 3, 2013 9:10:15 AM<br><b><span style="font-weight: bold;">Subject:</span></b> RE: Keys used in Standard
examples<br></font><br>
<style><!--
_filtered {font-family:Calibri;panose-1:2 15 5 2 2 2 4 3 2 4;}
_filtered {font-family:Tahoma;panose-1:2 11 6 4 3 5 4 4 2 4;}
_filtered {font-family:Verdana;panose-1:2 11 6 4 3 5 4 4 2 4;}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;margin-bottom:.0001pt;font-size:11.0pt;font-family:"Calibri", "sans-serif";}
a:link, span.MsoHyperlink
{color:blue;text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;text-decoration:underline;}
span.EmailStyle17
{font-family:"Calibri", "sans-serif";color:windowtext;}
span.EmailStyle18
{font-family:"Calibri", "sans-serif";color:#1F497D;}
.MsoChpDefault
{font-size:10.0pt;}
_filtered {margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{}
--></style>
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D;">Also, Edmund, is the public key in the JWK at the end of Standard 2.2.6.1
<a rel="nofollow" target="_blank" href="http://openid.net/specs/openid-connect-standard-1_0.html#art_res_ok">http://openid.net/specs/openid-connect-standard-1_0.html#art_res_ok</a> actually the one that is used to verify the ID Token signatures? I think it was mislabeled as one “</span><span style="color:black;" lang="EN">used
to validate the Request Object signature</span><span style="color:#1F497D;">”.</span></p>
<p class="MsoNormal"><span style="color:#1F497D;"> </span></p>
<p class="MsoNormal"><span style="color:#1F497D;"> Thanks,</span></p>
<p class="MsoNormal"><span style="color:#1F497D;"> -- Mike</span></p>
<p class="MsoNormal"><span style="color:#1F497D;"> </span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in;">
<p class="MsoNormal"><b><span style="font-size:10.0pt;">From:</span></b><span style="font-size:10.0pt;"> openid-specs-ab-bounces@lists.openid.net [mailto:openid-specs-ab-bounces@lists.openid.net]
<b>On Behalf Of </b>Mike Jones<br>
<b>Sent:</b> Monday, June 03, 2013 8:12 AM<br>
<b>To:</b> Edmund Jay<br>
<b>Cc:</b> openid-specs-ab@lists.openid.net<br>
<b>Subject:</b> [Openid-specs-ab] Keys used in Standard examples</span></p>
</div>
</div>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Hi Edmund,</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Can you please send us the keys used to sign the ID Tokens in the examples in Standard 2.2.6.1? If you have all the parts of the private key, please send them – not just “d”, but also “p”, “q”, “dp”, dq”, and “qi”. Likewise, please send
the full private key information for the keys used to sign the requests in 2.2.2.2 and 2.2.6.1.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Also, can you confirm that the key used in 2.2.6.1 is the one used to sign the requests, and not the one used to sign the ID tokens?</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"> Thanks,</p>
<p class="MsoNormal"> -- Mike</p>
<p class="MsoNormal"> </p>
</div>
</div></div>
</div></body></html>