Kieran, all,
I agree with swapping the boolean for a typed digest.
The type should name the record's media type, because each record kind
fixes its own preimage. The Approval Governance Record digest covers
the whole record with its envelope. A receipt under
draft-sirkkavaara-vaara-receipt-14 covers the signed receipt with
existenceProof removed (Section 3.6). The value itself can use the
form the Mission drafts already use, "sha-256:" and base64url, so a
verifier parses one encoding.
Both records hash JCS bytes with the signature included, so a holdercan check
the digest and the issuer's signature from the record alone.
Henri Sirkkavaara
Founder, Vaara
vaara.io | [email protected]
Red Hat Partner
_______________________________________________
OAuth mailing list -- [email protected]
To unsubscribe send an email to [email protected]
