Subject: [stir] Separation of JWS

From: Christer Holmberg <[email-masked]>
Date: Thu, 14 Jul 2016 22:45:29 +0000

Hi,

Perhaps the following has been discussed before, but I did not find the reason in draft-4474bis.

Why is the JWS signature "separated" from the headers and claims within the Identity header field? The signature is sent as the Identity header field value, while the headers and claims are sent as the "canon" header field parameter value.

That's now how JWS is defined, as far as I understand. Everything is sent as one string (with the different parts separated by ".").

Why isn't everything sent as the Identity header field value? That does not prevent you from e.g. not sending the claims.

Regards,

Christer