From c1fda924e2275dd924697451f721f57471949c52 Mon Sep 17 00:00:00 2001 From: Thibault Meunier Date: Mon, 5 Oct 2026 17:29:01 +0200 Subject: [PATCH] [protocol] separate JWK alg from signature alg registries Closes #136 --- draft-ietf-webbotauth-httpsig-protocol.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/draft-ietf-webbotauth-httpsig-protocol.md b/draft-ietf-webbotauth-httpsig-protocol.md index 37d9f8d..da0e102 100644 --- a/draft-ietf-webbotauth-httpsig-protocol.md +++ b/draft-ietf-webbotauth-httpsig-protocol.md @@ -577,8 +577,9 @@ Signature-Agent: sig1="https://signature-agent.test/jwks.json" ### Directory Format {#configuration} The resource MUST be a JSON Web Key Set (JWKS) as defined in {{Section 5 of -JWK}}. The `alg` parameter is restricted to algorithms registered in the HTTP -Signature Algorithms section of {{HTTP-MESSAGE-SIGNATURES-IANA}}. +JWK}}. A JWK `alg` member, when present, follows {{Section 4.4 of JWK}}. The +`alg` signature parameter, when present, follows the HTTP Signature Algorithms +section of {{HTTP-MESSAGE-SIGNATURES-IANA}}. The directory MUST be served over HTTPS. A directory served at the well-known URI registered in {{wkuri-reg}} MUST be served with media type