Visual RFC.
ALL RFCs / RFC 7515
Read the RFC ↗
RFC 7515 / MECHANISMS

One payload, several signatures

04

The general JSON serialization can associate several signatures with one payload.

Related RFCs and changes

“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.

RFC 7515 · § 7.2.1EXAMPLE
3 / 3
One payload, several signaturesThe general JSON serialization can associate several signatures with one payload. Current state: Acceptance policy.One payload, several signaturesshared payloadapplication signature policy
03
Acceptance policy

Check the required signatures; there is no universal all-signers rule.

Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
KEY POINT

Each signature has its own protected header and optional unprotected header.

  • Each signature has its own protected header and optional unprotected header.
  • Signatures are computed separately.
  • The application defines which signatures must validate for acceptance.
DETAILS

The illustration is schematic. Example values are illustrative; profiles and later security guidance can add requirements.

Read the RFC section ↗

Diagrams simplify the RFC. Read the linked sections for complete requirements.

Privacy
All chapters in this RFC
  1. What the signature covers
  2. Verification is a gate
  3. Protected and unprotected headers
  4. One payload, several signatures
  5. Authenticity does not stop replay
RFC 9700 / CHAPTERS

Chapters

For full details, tables, algorithms, and exceptions, read the original RFC.

RFC status and corrections ↗