JOSE Signatures added. Re: Local signatures using WebCrypto++

The IETF and W3C claims that all parameter- and message- data MUST be Base64-encoded
in a credible signature scheme.  I guess this is the opposite to XML DSig which builds
on an extremely elaborate (and provably brittle) canonicalization scheme.

Personally I have found that if you do certain (IMO "reasonable") assumptions
about JSON parsers, you can get away from both Base64 and canonicalization.

Anyway, the demo now runs all three different approaches just in case :-)


On 2014-11-19 18:07, Anders Rundgren wrote: