Use of nbf is NOT RECOMMENDED (#291)

* Use of nbf is NOT RECOMMENDED * Apply suggestions from code review Co-authored-by: Ted Thibodeau Jr <[email protected]> --------- Co-authored-by: Gabe <[email protected]> Co-authored-by: Ted Thibodeau Jr <[email protected]>
w3c · Aug 26, 2024 · 2581d85 · 2581d85
1 parent ca8fa18
commit 2581d85
Showing 1 changed file with 10 additions and 2 deletions.
diff --git a/index.html b/index.html
@@ -428,12 +428,16 @@ <h2 id="jose-header-parameters-jwt-claims">JOSE Header Parameters and JWT Claims
                 <code>exp</code>, and <code>cnf</code>.
             </p>
             <p>
-                When the <code>iat</code> and/or <code>exp</code> JWT claims are present, they
+                When the <code>iat</code> (Issued At) and/or
+		<code>exp</code> (Expiration Time) JWT claims are present, they
                 represent the issuance and expiration time of the signature, respectively. Note
                 that these are different from the <code>validFrom</code> and
                 <code>validUntil</code> properties defined in
                 <a data-cite="VC-DATA-MODEL-2.0#validity-period">Validity Period</a>, which
                 represent the validity of the data that is being secured.
+		Use of the <code>nbf</code> (Not Before) claim is NOT RECOMMENDED,
+		as it makes little sense to attempt to assign a future date to
+		a signature.
             </p>
             <p>
                 The claims and security provided by this specification are independent of the
@@ -819,12 +823,16 @@ <h2 id="cose-header-param-cwt-claims">COSE Header Parameters and CWT Claims</h2>
                 <code>exp</code>, and <code>cnf</code>.
             </p>
             <p>
-                When the <code>iat</code> and/or <code>exp</code> CWT claims are present, they
+                When the <code>iat</code> (Issued At) and/or
+		<code>exp</code> (Expiration Time) CWT claims are present, they
                 represent the issuance and expiration time of the signature, respectively. Note
                 that these are different from the <code>validFrom</code> and
                 <code>validUntil</code> properties defined in
                 <a data-cite="VC-DATA-MODEL-2.0#validity-period">Validity Period</a>, which
                 represent the validity of the data that is being secured.
+		Use of the <code>nbf</code> (Not Before) claim is NOT RECOMMENDED,
+		as it makes little sense to attempt to assign a future date to
+		a signature.
             </p>
             <p>
                 Additional members may be present as header parameters and claims. If they are