Choose from a JWK Set
02A JWK Set contains an array of keys; the consumer still needs a trusted source and selection policy.
Terms in this drawing
Related RFCs and changes
“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.
DIAGRAM§ 5 ↗
RFC 7517 · § 5EXAMPLE
3 / 3
03
Verify suitability
Confirm trust, algorithm compatibility, and permitted operation.
Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
Read the updated RFC section ↗
The keys member is an array of JWK objects.
- The keys member is an array of JWK objects.
- kid is a key-selection hint.
- Matching a kid does not prove that the returned key is trusted.
The illustration is schematic. Example values are illustrative; profiles and later security guidance can add requirements.
Read the RFC section ↗Diagrams simplify the RFC. Read the linked sections for complete requirements.
Privacy