Disclaimer: I have not been involved in this in any way... https://www.w3.org/Payments/IG/wiki/Main_Page/ProposalsQ42015/SCAI
Anyway, since the purpose is creating a single object eventually holding all contributions (like a multi-step block-chain), a scheme where signatures effectively hide the content doesn't appear to be the right solution. Incompatibility with JSON schema and bigger size [1] compared to clear-text solutions may also prove to be a hurdle for JOSE for business messaging. Personally I think it would be better creating a JOSE2 where the existing JOSE signature algorithms and [most of the] key-words are applied to an ES6-compatible [2] "in-object" JS/JSON signature solution. - Anders 1] in a scheme using the depicted 6 envelopes the difference may easily be a factor 2.5 or more. 2] As implemented in Chrome, Firefox, and Safari. _______________________________________________ jose mailing list [email protected] https://www.ietf.org/mailman/listinfo/jose
