Section 8, second paragraph: Delete the security considerations paragraph about not using "alg":"none".

Section 8, second paragraph: Delete the security considerations paragraph about not using "alg":"none". Using an Unsecured JWS is no worse than sending the parameters the usual way. (Mike Jones)

Reject. It is no worse, but it is better to sign. Thus, it is using "should".

Comments (1)