[security-dev] securing JSON

[Anil Saldhana]

On 07/31/2012 04:00 PM, Bill Burke wrote:
> I think you should contribute to the Jackson project to implement JSON
> security.  I'm assuming JSON security means encrypting various pieces of
> a json document? all the stuff we have in XML land?
The idea is to encrypt content (arbitrary bytes) and send it as part
of a json construct.  Unlike the xml document scenarios, where you
want to encrypt parts.  There is currently a BSD style implementation
of json security drafts by a German researcher, that I have requested
to be made into an independent project.  Then Jackson or any other
project that intends to have json signature/encryption can get this
functionality via this independent library.

>
> Also, I still never understood why somebody would want a partial
> encryption of a document.  Why not just send it via S/MIME?
>
Bill,  time for you to submit a IETF draft to datatracker.ietf.org/wg/jose/