JSON Web Signature JSON Serialization (JWS-JS)
draft-jones-jose-jws-json-serialization-02
| The information below is for an old version of the document |
| Document |
Type |
|
Active Internet-Draft (individual)
|
|
Last updated |
|
2012-10-15
|
|
Stream |
|
(None)
|
|
Intended RFC status |
|
(None)
|
|
Formats |
|
pdf
htmlized
bibtex
|
| Stream |
Stream state |
|
(No stream defined) |
|
Consensus Boilerplate |
|
Unknown
|
|
RFC Editor Note |
|
(None)
|
| IESG |
IESG state |
|
I-D Exists
|
|
Telechat date |
|
|
|
Responsible AD |
|
(None)
|
|
Send notices to |
|
(None)
|
JOSE Working Group M. Jones
Internet-Draft Microsoft
Intended status: Standards Track J. Bradley
Expires: April 18, 2013 independent
N. Sakimura
Nomura Research Institute
October 15, 2012
JSON Web Signature JSON Serialization (JWS-JS)
draft-jones-jose-jws-json-serialization-02
Abstract
The JSON Web Signature JSON Serialization (JWS-JS) is a means of
representing content secured with digital signatures or Message
Authentication Codes (MACs) using JavaScript Object Notation (JSON)
data structures. This specification describes a means of
representing secured content as a JSON data object (as opposed to the
JWS specification, which uses a compact serialization with a URL-safe
representation). It enables multiple digital signatures and/or MACs
to be applied to the same content (unlike JWS). Cryptographic
algorithms and identifiers used with this specification are described
in the separate JSON Web Algorithms (JWA) specification. The JSON
Serialization for related encryption functionality is described in
the separate JSON Web Encryption JSON Serialization (JWE-JS)
specification.
Status of this Memo
This Internet-Draft is submitted in full conformance with the
provisions of BCP 78 and BCP 79.
Internet-Drafts are working documents of the Internet Engineering
Task Force (IETF). Note that other groups may also distribute
working documents as Internet-Drafts. The list of current Internet-
Drafts is at http://datatracker.ietf.org/drafts/current/.
Internet-Drafts are draft documents valid for a maximum of six months
and may be updated, replaced, or obsoleted by other documents at any
time. It is inappropriate to use Internet-Drafts as reference
material or to cite them other than as "work in progress."
This Internet-Draft will expire on April 18, 2013.
Copyright Notice
Copyright (c) 2012 IETF Trust and the persons identified as the
Jones, et al. Expires April 18, 2013 [Page 1]
Internet-Draft JWS JSON Serialization (JWS-JS) October 2012
document authors. All rights reserved.
This document is subject to BCP 78 and the IETF Trust's Legal
Provisions Relating to IETF Documents
(http://trustee.ietf.org/license-info) in effect on the date of
publication of this document. Please review these documents
carefully, as they describe your rights and restrictions with respect
to this document. Code Components extracted from this document must
include Simplified BSD License text as described in Section 4.e of
the Trust Legal Provisions and are provided without warranty as
described in the Simplified BSD License.
Table of Contents
1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 3
1.1. Notational Conventions . . . . . . . . . . . . . . . . . . 3
2. Terminology . . . . . . . . . . . . . . . . . . . . . . . . . . 3
3. JSON Serialization . . . . . . . . . . . . . . . . . . . . . . 3
4. Example JWS-JS . . . . . . . . . . . . . . . . . . . . . . . . 4
5. IANA Considerations . . . . . . . . . . . . . . . . . . . . . . 5
6. Security Considerations . . . . . . . . . . . . . . . . . . . . 5
7. References . . . . . . . . . . . . . . . . . . . . . . . . . . 5
7.1. Normative References . . . . . . . . . . . . . . . . . . . 5
7.2. Informative References . . . . . . . . . . . . . . . . . . 6
Appendix A. Acknowledgements . . . . . . . . . . . . . . . . . . . 6
Appendix B. Open Issues . . . . . . . . . . . . . . . . . . . . . 6
Appendix C. Document History . . . . . . . . . . . . . . . . . . . 6
Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . . 7
Jones, et al. Expires April 18, 2013 [Page 2]
Internet-Draft JWS JSON Serialization (JWS-JS) October 2012
1. Introduction
The JSON Web Signature JSON Serialization (JWS-JS) is a format for
representing content secured with digital signatures or Message
Authentication Codes (MACs) as a JavaScript Object Notation (JSON)
[RFC4627] object. It enables multiple digital signatures and/or MACs
to be applied to the same content (unlike JWS [JWS]). The digital
signature and MAC mechanisms used are independent of the type of
content being secured, allowing arbitrary content to be secured.
Cryptographic algorithms and identifiers used with this specification
are described in the separate JSON Web Algorithms (JWA) [JWA]
specification. The JSON Serialization for related encryption
functionality is described in the separate JSON Web Encryption JSON
Show full document text