Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Spec clarification on canonicalization for signing #187

@gordonbrander

Description

@gordonbrander

The spec says

All UCANs MUST be canonically encoded with DAG-CBOR for signing.

However the canonicalization spec says

Per the core UCAN spec, all implementations MUST support JWT encoding. This provides a common representation that all implementations can understand. JWT canonicalization allows for alternate encodings to convert to and from the standard JWT format, retain the JWT signature scheme, and so on.

and in the encoding steps,

dag-json encoding MUST be used

The rs-ucan implementation seems to reflect this, canonicalizing the payload to a dag-json JWT for signing.

Is dag-json the canonical encoding for signing?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions