Core - 15.14. Signing and Encryption Order

[Nat Sakimura]

It may be worthwhile to point out that all JWE algorithms are integrity protecting as well.

Proposal:

Add the following as the second paragraph.

NOTE: All encryption algorithms used in JWE are AEAD algorithms that protects integrity so there is no need to oversign the encrypted payload separately.

[Michael Jones]

We will apply this editorial comment, making sure not to mislead people into believing they don't need to sign.

[Michael Jones]

Fixed #910 - Added comment about JWE using only integrity protecting algorithms

→ <<cset 5bb9e8acb39c>>