On 2023-11-27, at 15:55, Orie Steele <[email protected]> wrote: > > application/jwt; profile=secevent > > This is a general form of the challenges associated with using multiple > structured suffixes with JWTs.
Anything that reduces our need to extract semantics from complex nested structured suffixes is good. Independent of which form is being used here, I’d like to raise the specter of ossification: Will we be able to evolve the profile name (nested media type subtype) once a subtype/profile is in wide use? (I think in the end we will exactly do that TLS 1.3 did: send fake TLS 1.2 identification and do the recognition of TLS 1.3 on a higher level.) Grüße, Carsten _______________________________________________ OAuth mailing list [email protected] https://www.ietf.org/mailman/listinfo/oauth
