Subject: [OAUTH-WG] FW: JOSE -34 and JWT -28 drafts addressing IESG review comments

From: Mike Jones <[email-masked]>
Date: Tue, 14 Oct 2014 12:39:33 +0000

From: Mike Jones
Sent: Tuesday, October 14, 2014 5:39 AM
To: [email-masked]
Subject: JOSE -34 and JWT -28 drafts addressing IESG review comments

Updated JOSE and JWT specifications have been published that address the IESG review comments received.  The one set of normative changes was to change the implementation requirements for RSAES-PKCS1-V1_5 from Required to Recommended- and for RSA-OAEP from Optional to Recommended+.  Thanks to Richard Barnes, Alissa Cooper, Stephen Farrell, Brian Haberman, Ted Lemon, Barry Leiba, and Pete Resnick for their IESG review comments, plus thanks to Scott Brim and Russ Housley for additional Gen-ART review comments, and thanks to the working group members who helped respond to them.  Many valuable clarifications resulted from your thorough reviews.

The specifications are available at:

*        http://tools.ietf.org/html/draft-ietf-jose-json-web-signature-34

*        http://tools.ietf.org/html/draft-ietf-jose-json-web-encryption-34

*        http://tools.ietf.org/html/draft-ietf-jose-json-web-key-34

*        http://tools.ietf.org/html/draft-ietf-jose-json-web-algorithms-34

*        http://tools.ietf.org/html/draft-ietf-oauth-json-web-token-28

HTML formatted versions are available at:

*        http://self-issued.info/docs/draft-ietf-jose-json-web-signature-34.html

*        http://self-issued.info/docs/draft-ietf-jose-json-web-encryption-34.html

*        http://self-issued.info/docs/draft-ietf-jose-json-web-key-34.html

*        http://self-issued.info/docs/draft-ietf-jose-json-web-algorithms-34.html

*        http://self-issued.info/docs/draft-ietf-oauth-json-web-token-28.html

                                                            -- Mike

P.S.  I also published this note at http://self-issued.info/?p=1291 and as @selfissued.