On 2022-02-21 17:31, Carsten Bormann wrote:
On 2022-02-21, at 17:15, Anders Rundgren <[email protected]> wrote:
I couldn't find any valid reason for using JSON
We seem to have found an area where we agree :-)
In this context, right :)
However, due to the myriad of CBOR serialization options, CWTs suffer from
interoperability issues (*) making JWTs a better choice for *ubiquitous* usage
:(
By *mandating* preferred serialization ("I-CBOR") you can achieve the same
interoperability as with JWTs, as well as getting away from the need to bury
data-to-be-signed in byte-strings.
Such solutions can also conserve buffer RAM in the case RAM is a scarce
resource. Yes, depending on the application your mileage may vary.
Cheers,
Anders
*) Looking at things from a *specification* point of view only.
Grüße, Carsten
_______________________________________________
COSE mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/cose
