A developer working with the Nimbus jose+jwt library raised the question whether setting of the public "use" [1] parameter should be disabled for JWKs of type "oct". This appears to make sense, even though the JWA spec [2] doesn't mention it. Is this correct?
Thanks, Vladimir [1] http://tools.ietf.org/html/draft-ietf-jose-json-web-key-40#section-4.2 [2] http://tools.ietf.org/html/draft-ietf-jose-json-web-algorithms-40#section-6.4 _______________________________________________ OAuth mailing list [email protected] https://www.ietf.org/mailman/listinfo/oauth
