Verification is a gate
02A consumer verifies the signature or MAC before treating the protected content as authenticated.
Related RFCs and changes
“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.
DIAGRAM§ 5.2 ↗
RFC 7515 · § 5.2EXAMPLE
3 / 3
03
Reject a mismatch
Do not pass modified content through to trusted processing.
Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
Read the updated RFC section ↗
The application determines acceptable algorithms.
- The application determines acceptable algorithms.
- An invalid cryptographic check rejects that JWS.
- A valid signature does not establish that its key is trusted for every purpose.
The illustration is schematic. Example values are illustrative; profiles and later security guidance can add requirements.
Read the RFC section ↗Diagrams simplify the RFC. Read the linked sections for complete requirements.
Privacy