> > The intent is b.  I propose that the words "This member MUST be 
> > present, even if the array elements contain only the empty JSON object 
> > "{}"" be changed to "This member MUST be present with exactly one 
> > array element per recipient, even if some or all of the array element 
> > values are the empty JSON object {}".  Would that be clearer?
>
> I think that would have helped me.  Again, another small point.
>
> OK
>
> [JLS]  I think that this language may not be correct.  Did you mean to imply 
> that the following is a legal value for the "recipients" property.  "[{},{}]"
> It appears that there can be any number of empty array elements can be 
> present.
>
> If this is not the case I will try and look at proposing some text.

The full text about the recipients array at 
http://tools.ietf.org/html/draft-ietf-jose-json-web-encryption-35#section-7.2 
is:

   recipients
      The "recipients" member value MUST be an array of JSON objects.
      Each object contains information specific to a single recipient.
      This member MUST be present with exactly one array element per
      recipient, even if some or all of the array element values are the
      empty JSON object "{}" (which can happen when all Header Parameter
      values are shared between all recipients and when no encrypted key
      is used, such as when doing Direct Encryption).

So it's not that any number of empty array elements can be present.  It's that 
exactly one JSON object must be present in the array per recipient, some of 
which may be empty because of the parameter choices made.

                                -- Mike

_______________________________________________
jose mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/jose

Reply via email to