On 2020-03-04, at 19:40, Henk Birkholz <[email protected]> wrote: > > 1.) go to COSE and ask for a "null signature",
https://en.wikipedia.org/wiki/Just_Say_No > 2.) go to ACE and ask for an "unsigned token" option, or > 3.) go to CBOR and ask for a tag for "naked" CWT Claim Sets (i.e., that are > not signed). I believe this is pretty much the same option. I think ACE would come up with a CBOR tag as the obvious technical solution, and CBOR would suggest exactly that to ACE as the group responsible for CWT (and thus CWT Claims Sets). Apparently the only technical problem we have is that we don’t have a defined way to mark a naked CWT Claims Set (NCCS) as such; EATs would then be either NCCS or CWTs. CBOR tags are cheap and solve this problem. Grüße, Carsten _______________________________________________ Ace mailing list [email protected] https://www.ietf.org/mailman/listinfo/ace
