openstack
/
keystone-specs
Code Issues Proposed changes

Merge "Add a note about crypto-agility with JWT"

This commit is contained in:
Zuul 2018-12-11 19:10:07 +00:00 committed by Gerrit Code Review
parent 7f6789e4e6 fd0b5e6a5a
commit c197cff662
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
specs/keystone/stein/json-web-tokens.rst
View File

@ -212,6 +212,9 @@ validating multiple blessed algorithms, allowing multiple tokens signed with
different algorithms to be validated without require configuration changes different algorithms to be validated without require configuration changes
except on the signing node. except on the signing node.
For the time being, if a deployment is using JWTs and needs to exercise
crypto-agility, it is recommended they convert to Fernet tokens.
Alternatives Alternatives
------------ ------------