Yes, but IIUC iat goes in the payload only according to the spec, so the first signer can put it in, but if the second signature comes along the next day there is no place for iat to go, because the second signer only adds a new header. An obvious solution might be to just put another iat in the second header. _______________________________________________ jose mailing list [email protected] https://www.ietf.org/mailman/listinfo/jose
- [jose] JWS-JS on disk Daniel Holth
- Re: [jose] JWS-JS on disk Nat Sakimura
- Re: [jose] JWS-JS on disk Daniel Holth
- Re: [jose] JWS-JS on disk Daniel Holth
