[OAUTH-WG] Reminder: Alternative text for sd-jwt privacy considerations.

2025-01-08 Thread Watson Ladd
Dear oauth wg, Happy 2025! I hope everyone has had a nice set of holidays. As a reminder I put forward the following proposal for text to add to either privacy or security considerations of sd-jwt, but the timing was unfortunate, coming Christmas eve. Comments on it welcome. "SD-JWT conceals only

[OAUTH-WG] Re: WGLC for Token Status List

2025-01-08 Thread Dean Saxe
I would not be opposed to more examples and/or test vectors included in an appendix. I didn’t recognize that the examples were meant as test vectors and don’t recall that specifically being identified in the draft. -dhs -- Dean H. Saxe, CIDPRO Principal Engineer Offic

[OAUTH-WG] Re: WGLC for Token Status List

2025-01-08 Thread chris.borm...@gmx.de
Hi Jorge, With that part, we meant the examples given in Section 4 & 10 where examples are given for 1 and 2 bit status lists (byte array and base64url encoding for the JWT variant).Perhaps a general question: Would more and bigger examples / test vectors be helpful? Best Regards,Christian From: Ol