The part that I don’t understand is the semantics. LAKE/edhoc kccs/kcwt is clear: This is the identity, and here (cnf) is the key for that.
For claims-in-headers we know that the syntax is one of CCS/CWT, but I don’t think there is any text that indicates what links this information with the COSE data item. It might be dangerous to leave the semantics of including the claim set/CWT to the context. It might be OK, and JWT might lead us into experience that this is so. It might be OK, if we explicitly say “there is no semantics” (e.g., presenting a key does NOT mean this is the key that applies here). I haven’t done the digging yet to find out. Grüße, Carsten _______________________________________________ COSE mailing list [email protected] https://www.ietf.org/mailman/listinfo/cose
