Subject: [OAUTH-WG] proof-of-possession-02 unencrypted oct JWK in encrypted JWT okay?

From: Brian Campbell <[email-masked]>
Date: Mon, 23 Mar 2015 01:40:58 -0500

When the JWT is itself encrypted as a JWE, would it not be reasonable to
have a symmetric key be represented in the cnf claim with the jwk member as
an unencrypted JSON Web Key?

Is such a possibility left as an exercise to the reader? Or should it be
more explicitly allowed or disallowed?