Orie Steele

Is there any example regarding your proposal to define this in JPA? AFAIK, there are no concrete schemes that support any form of multisig in either JPA, JWP, or JWS...

I will give it a shot, thanks for the reply.

yes, please times 1,000.... never again with EC point compression patent work arounds...

I don't see any problem embedding `lyt` in the protected header, either by value or be reference... A verifier is still going to be required to "have the verification key"...

I suggest we explicitly move COSE out of scope for the time being, and come back to it when with have figured out the JSON side better.

Another option might be to put the "signature for the merkle root"... on the end of the "proof" object... So instead of this: #### Option 1 ``` { // From...

I prefer Option 1

@quartzjer thanks, this makes a lot of sense, I will try and revise my proposal to align with it better.

@quartzjer I finally got some time to hack this out... https://github.com/OR13/jwp-mdt/tree/main/ref-impl#json-web-proof-for-merkle-proof-based-selective-disclosure I opted not to provide an `lyt` transform for the payloads, since I still don't fully understand how to...

@quartzjer yep, we are already partially doing that here... https://github.com/OR13/jwp-mdt/blob/main/ref-impl/merkle.js#L41 I am familiar with TLV from NFC space, I could easily implement that approach... this is a very good suggestion.