Re: Updated: Re: Giving up on XML DSig => JSON

On Sat, Aug 31, 2013 at 2:57 PM, Anders Rundgren
<anders.rundgren.net@gmail.com> wrote:
> Hi,
> Based on the _extremely_ useful feedback received, I have decided to update the proposed clear-text JSON Signature scheme.
>
> Canonicalization:
> - Remove whitespace
> - Unescape "strings"
> - Sort properties
Where, precisely, is the signature or signatures placed in light of
the fact that everything minus the SignatureValue is sorted?

Is this OK:

   "SignatureValue": ...
   "A": ...
   "B": ...

How about this:

   "A": ...
   "SignatureValue": ...
   "B": ...

And this:

   "A": ...
   "SignatureValue": ...
   "B": ...
   "SignatureValue": ...
   "C": ...

>From the Public Key example on page 3/5:

"Public Key"
 {
    "RSA" : ...
}

Received on Saturday, 31 August 2013 20:08:47 UTC