Skip to content

Commit

Permalink
Use header instead of resolved key manifest for #275
Browse files Browse the repository at this point in the history
  • Loading branch information
aj-stein-nist committed Aug 7, 2024
1 parent 87e9951 commit 1780435
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion draft-ietf-scitt-architecture.md
Original file line number Diff line number Diff line change
Expand Up @@ -485,7 +485,7 @@ Issuers and Relying Parties must be able to recognize the Artifact to which the
The `iss` and `sub` Claims, within the CWT_Claims protected header, are used to identify the Artifact the Statement pertains to.
(See Subject under {{terminology}} Terminology.)

Issuers MAY use different signing keys (identified by `kid` in the resolved key manifest) for different Artifacts, or sign all Signed Statements under the same key.
Issuers MAY use different signing keys (identified by `kid` in the protected header) for different Artifacts, or sign all Signed Statements under the same key.

An Issuer can make multiple Statements about the same Artifact.
For example, an Issuer can make amended Statements about the same Artifact as their view changes over time.
Expand Down

0 comments on commit 1780435

Please sign in to comment.