Chooses the kid a signer puts in a header: the internal one under
internal, the thumbprint URI under jwk-thumbprint-uri.
A key whose thumbprint cannot be computed is published under its internal
kid, and the failure is logged once per key (STS-KEYS-0055); it never stops
a signature.
Chooses the
kida signer puts in a header: the internal one underinternal, the thumbprint URI underjwk-thumbprint-uri.A key whose thumbprint cannot be computed is published under its internal
kid, and the failure is logged once per key (STS-KEYS-0055); it never stops a signature.