If this is *only* used for detached payloads, then that's fine, but you then to define it as just that. Otherwise you get the problem that Jim identified.
JWS Detached Signature = UTF8(JWS Protected Header)) || '.' || (JWS Signature) On 25 March 2015 at 14:42, Mike Jones <[email protected]> wrote: > As a historical note, the signature comes last in the JWS Compact > Serialization to enable computing it in a streaming manner, for algorithms > where this is possible. Yes, that is the logical place for a signature. _______________________________________________ jose mailing list [email protected] https://www.ietf.org/mailman/listinfo/jose
