Subject: [OAUTH-WG] Editorial: draft-ietf-oauth-jwsreq-16

From: Kaoru Maeda <[email-masked]>
Date: Wed, 18 Jul 2018 09:32:25 -0400

Hi,

I have some questions on jwsreq-16 (maybe editorial).

* Section 5.2.1
In the request_uri example, what does fragment part (#Gku...) mean?
https://tfp.example.org/request.jwt#GkurKxf5T0Y-mnPFCHqWOMiZi4VS138cQO_V7PZHAdM
Does this fragment correspond to the entropy mentioned in the text?

* Section 10.4
"redirect_uri" should read "request_uri"

* Section 10.4.x
There are two media types mentioned: application/jose, and /json.
Earlier in the document I found application/jwt.
It seems to make sense even when all of these are application/jwt.
Does application/jose specifically mean JWS/JWE?
Is these difference intentional?

Regards,

Kaoru Maeda