Stream: implementers
Topic: canonicalizing FHIR resources
Josh Mandel (Jul 25 2016 at 19:45):
http://hl7-fhir.github.io/json.html#canonical defines json#static which strips meta but leaves id in place. For portability, shouldn't id be stripped too?
Grahame Grieve (Jul 25 2016 at 19:53):
signing resources without ids means that the targets of urls would need to be exempt too. What's left to meaningfully sign?
Paul Knapp (Jul 31 2016 at 06:37):
If you want the signature to survive movement of the resource then the signature must be over the content of the resource and where urls are present over the content or the signature of the referenced resource at the url location not the reference itself.
Last updated: Apr 12 2022 at 19:14 UTC
