SECDIR Review: Section 10 -- why no reference for JWS algorithms?

Issue #26 resolved
Nat Sakimura repo owner created an issue

Section 10 describes Security Considerations in addition to the ones already describes in RFC 6119 (OAuth 2.0). The wording of Section 10.1 is odd: “ …it MUST either be JWS signed with then considered appropriate algorithm or encrypted using [RFC7516].” Why is there no cite of 7515 for JWS algorithms here, to parallel the cite of JWE?

Comments (2)

  1. Log in to comment