Re: [jose] #15: At least one key indicator should be mandatory

["jose issue tracker" <[e-mail]>]

#15: At least one key indicator should be mandatory


Comment (by [e-mail]):

 draft-ietf-jose-json-web-encryption-11, draft-ietf-jose-json-web-
 signature-11, and draft-ietf-jose-json-web-key-11 incorporate the
 resolution to this issue agreed to at the interim working group meeting in
 Denver.  Specifically, this new section is now present in JWS and a
 corresponding section is present in JWE:

 7.  Key Identification

    It is necessary for the recipient of a JWS to be able to determine
    the key that was employed for the digital signature or MAC operation.
    The key employed can be identified using the Header Parameter methods
    described in Section 4.1 or can be identified using methods that are
    outside the scope of this specification.  Specifically, the Header
    Parameters "jku", "jwk", "x5u", "x5t", "x5c", and "kid" can be used
    to identify the key used.  The sender SHOULD include sufficient
    information in the Header Parameters to identify the key used, unless
    the application uses another means or convention to determine the key
    used.

 Also, this text is now present in the "kid" description in JWK:

    When "kid" values are used within a JWK Set, different
    keys within the JWK Set SHOULD use distinct "kid" values.  The "kid"
    value is a case sensitive string.  Use of this member is OPTIONAL.

    When used with JWS or JWE, the "kid" value can be used to match a JWS
    or JWE "kid" header parameter value.

 Therefore, I believe that this issue should be closed as fixed.

-- 
-------------------------+-------------------------------------------------
 Reporter:  [e-mail]   |       Owner:  draft-ietf-jose-json-web-
     Type:  defect       |  [e-mail]
 Priority:  minor        |      Status:  new
Component:  json-web-    |   Milestone:
  encryption             |     Version:
 Severity:  -            |  Resolution:
 Keywords:               |
-------------------------+-------------------------------------------------

Ticket URL: <http://trac.tools.ietf.org/wg/jose/trac/ticket/15#comment:7>
jose <http://tools.ietf.org/jose/>