Ian McMillan

Implement COSE as signing envelope

6

I'd like to see Notary v2 support [CBOR Object Signing and Encryption (COSE)](https://datatracker.ietf.org/doc/html/rfc8152) as the signing envelope for content, as it is flexible to support all of the Nv2 signing...

Relax EKU requirements on signing certificates

2

Softening the requirement on the "signing" certificate (not "codesigning") for the signing of content in the registry to "MAY" contain the codeSign EKU ('id-kp-codeSigning') is the best way to allow...

Relax minimum subject DN field values for trustedIdentities to not include state/province (S/ST)

5

Currently in the [Trust Store and Trust Policy Specification](https://github.com/notaryproject/specifications/blob/main/specs/trust-store-trust-policy.md) in the [Trusted Identities Constraints](https://github.com/notaryproject/specifications/blob/main/specs/trust-store-trust-policy.md#trusted-identities-constraints) section there is a minimum field requirement on x.509 cert subject DN values stated as: "Each...