- changed status to wontfix
Section 8, second paragraph: Delete the security considerations paragraph about not using "alg":"none".
Issue #7
wontfix
Section 8, second paragraph: Delete the security considerations paragraph about not using "alg":"none". Using an Unsecured JWS is no worse than sending the parameters the usual way. (Mike Jones)
Reject. It is no worse, but it is better to sign. Thus, it is using "should".
Comments (1)
-
reporter - Log in to comment