Steve Venema comments

Repositories
Issues
Comments

Results 2 comments of


                                            Steve Venema

Why HAIP implies that there are temporal validation rules for `iat` when it has none, and at the same time does not mention `nbf` at all?

> nbf is only useful if tokens are going to be future-dated and not valid when issued. That doesn't match our use cases. Therefore, we should not add or mention...

Change mandating ECDH-ES to mandating some version of HPKE

@GarethCOliver : I am in favor of adding HPKE; my question is **how** and **when**. For reference, the only current mention of HPKE in the VP/VCI/HAIP specs is the following...