Thank you for the replies. (Omitting unicast CCs by request) It seems that
1) /.well-known/jwks.json might not be in as common use as I thought, but maybe OAUTH types might want to register it so as to reduce surprise in the future. 2) We, ANIMA, should probably have two or three RFC7517 containing end points with semantics that we control/define. We already have /.well-known/brski, with IANA rules, so we should do it there. I'm sorry if this sounded like crying wolf :-) -- Michael Richardson <mcr+i...@sandelman.ca> . o O ( IPv6 IøT consulting ) Sandelman Software Works Inc, Ottawa and Worldwide
signature.asc
Description: PGP signature
_______________________________________________ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth