All, I have been working on two internet drafts to enable the signing of our CACAO JSON data. The first has already been published as an RFC, the second has just been released as a -00 draft. JCS (RFC8785) -
https://tools.ietf.org/html/rfc8785 JWS/CT -
https://datatracker.ietf.org/doc/draft-jordan-jws-ct/ We should be able to use these to sign our CACAO data and do all of the signing things we have talked about in our requirements document. Thanks, Bret PGP Fingerprint: 63B4 FC53 680A 6B7D 1447 F2C0 74F8 ACAE 7415 0050 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg." Attachment: smime.p7s Description: S/MIME Cryptographic Signature