Missing clarity about JWS requirement

[qligier]

Section Number 3.71.4.2.2.1

Issue
It is unclear whether JWT shall be or may be signed.
The profile says JWT token shall be signed as specified in JSON Web Signature [RFC7515], which would require the use of JWS, but the next sentence starts with If signed. The first sentence could then be understood as "If signed, one must follow RFC7515" (i.e. a restriction on the signature method, and not an unconditional requirement).

Proposed Change
N/A

Priority:
N/A

[JohnMoehrke]

Martin, can you review and comment?

[msmock]

I agree. We should remove the "If signed" phrase from the sentence. This is not a functional change, so I guess we don't need a ballot.

[JohnMoehrke]

excellent, please submit a pull-request. We can review during a meeting and approve if the committee also sees it as a technical correction.