Re: [OAUTH-WG] Link relations for authenticating

2019-05-12 Thread Evert Pot
On 2019-05-06 2:35 p.m., Neil Madden wrote: > I don’t know the relative merits of Link headers vs .well-known, but > there is at least one other draft standard I know of that is going > down the .well-known route for this kind of thing (password changes in > this case): > > https://github.com/WICG/

Re: [OAUTH-WG] Public key authenticated encryption for JWTs [Was Re: JWT ATs and authenticated encryption]

2019-05-12 Thread Neil Madden
I have published a -01 version with example computations for both ECDH-1PU over P-256 and also a two-way interactive handshake using it with X448 keys. I also fleshed out the security considerations and added a “skid” (Sender Key ID) header parameter. I think this is potentially very useful in