OPSDIR Review : Section 4 Request Object - Clarify 'signed, encrypted, or signed and encrypted'

This JSON [RFC7159] constitutes the JWT Claims Set [RFC7519]. The JWS Claims Set is then signed, encrypted, or signed and encrypted. [O] then signed, encrypted, or signed and encrypted. [P] then signed, or encrypted, or signed and encrypted.

[R] I am guessing this is what's meant" Otherwise, it's not clear whether "signed, encrypted" is supposed to be an OR or an and. Upon further reading of the document, I think this is supposed to mean, "signed, or encrypted, or signed and encrypted."

Comments (2)