[All Lists] [By Thread] [By Date] [Previous] [Next]
From: R. Feldman
Subject: Certificate format
Date: 10 Cheshvan 5782
The chair notes the emerging consensus.
JWT provides: - Signed JSON payload (sufficient for our claims) - Standard libraries (implementation exists) - Extensibility via custom claims (policy data) - Simplicity appropriate to our trust model
X.509 provides features we explicitly rejected (hierarchy, chains, intermediate authorities).
Unless there are objections, the specification will adopt JWT as the certificate format. Dr. Lobel's concerns are noted in the record.
—Yaakov Feldman, Chair
Thread: