JOSE - Do we want to support RFC 5280 SubjectPublicKeyInfo values?

[Michael Jones]

Do we want to support RFC 5280 SubjectPublicKeyInfo bare values, rather than just X.509 certs and self-signed certs?

[Michael Jones]

The working group's sense is that we already have two key representations, which complicates life enough. It's not clear that there are enough tools and usage of this to make it worthwhile. Unless JOSE picks this up, we don't need to take any action.

[Brian Campbell]

I'd argue that Connect is already dealing with issues in having one too many ways to represent keys (x509 + JWK) and sure doesn't need another one.