File tree Expand file tree Collapse file tree 1 file changed +6
-5
lines changed Expand file tree Collapse file tree 1 file changed +6
-5
lines changed Original file line number Diff line number Diff line change @@ -24,7 +24,7 @@ SERIALIZED_BODY | bytes | Yes | Yes
24
24
PAYLOAD_TYPE | string | Yes | Yes
25
25
KEYID | string | No | No
26
26
27
- * SERIALIZED_BODY: Byte sequence to be signed.
27
+ * SERIALIZED_BODY: Arbitrary byte sequence to be signed.
28
28
29
29
* PAYLOAD_TYPE: Opaque, case-sensitive string that uniquely and unambiguously
30
30
identifies how to interpret ` payload ` . This includes both the encoding
@@ -34,10 +34,11 @@ KEYID | string | No | No
34
34
* [ Media Type] ( https://www.iana.org/assignments/media-types/ ) , a.k.a. MIME
35
35
type or Content Type
36
36
* Example: ` application/vnd.in-toto+json ` .
37
- * IMPORTANT: SHOULD NOT be a generic type that only represents
38
- encoding but not schema. For example, ` application/json ` is almost
39
- always WRONG. Instead, invent a media type specific for your
40
- application in the ` application/vnd ` namespace.
37
+ * IMPORTANT: This SHOULD be an application-specific type describing
38
+ both encoding and schema, NOT a generic type like
39
+ ` application/json ` . The problem with generic types is that two
40
+ different applications could use the same encoding (e.g. JSON) but
41
+ interpret the payload differently.
41
42
* SHOULD be lowercase.
42
43
* [ URI] ( https://tools.ietf.org/html/rfc3986 )
43
44
* Example: ` https://example.com/MyMessage/v1-json ` .
You can’t perform that action at this time.
0 commit comments