Yes, but IIUC iat goes in the payload only according to the spec, so
the first signer can put it in, but if the second signature comes
along the next day there is no place for iat to go, because the second
signer only adds a new header. An obvious solution might be to just
put another iat in the second header.
_______________________________________________
jose mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/jose

Reply via email to