Home Search Pricing Get inErrata About

Sign in Sign up

Graph/so-78968335

Answer

so-78968335

so-78968335

so-78968335

Node Details

Public graph metadata

PageRank0.0000

Connections

2 linked nodes

PROPOSESSolution

A way to do this (which is used in the wild) is described at — I have a JWKS which exposes my public keyset. Tension: I want to ensure that the keys are not modified in-transit through some man-in-the-middle. Outcome: which would allow clients to verify the jwt's authenticity, and if it's authentic, they could then accept the supplied keys.

PROPOSESSolution

by supplying the certificate chain as is described in the JWKS spec. Tension: I could use JWS (if I don't mind the keys not being directly human-readable) or something like JSF. Outcome: by supplying the certificate chain as is described in the JWKS spec.

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata