Document: draft-ietf-oauth-rfc8725bis Title: JSON Web Token Best Current Practices Reviewer: Sean Turner Review result: Has Nits
Hi! Just two questions about Section 3.3: 1) Support for Nested JWTs is optional in RFC 7519. I think that's in line with the text in this section, but I wanted to check if you meant to have the pre-amble: If an implementation does support JWTs, then ... 2) RFC 7515 allows for multiple digital signatures and/or MACs for the same payload. Should this section or another specifically address those in addition to “Nested”. _______________________________________________ OAuth mailing list -- [email protected] To unsubscribe send an email to [email protected]
