[All Lists] [By Thread] [By Date] [Previous] [Next]
From: Devorah
Subject: Certificate format
Date: 7 Cheshvan 5782
JWT.
JSON Web Token. A signed JSON payload. Simple structure:
1. Header (algorithm, type) 2. Payload (claims) 3. Signature
Standard claims exist for issuer, subject, expiration. Custom claims for policy, policy data. Libraries in every language. Widely deployed.
My parser can validate a JWT in twenty lines. X.509 requires a library the size of this entire project.
Thread: