Related: Latacora's (2019) article, How (not) to sign a JSON object[1]. In short, nesting trees and signing them is difficult and prone to pitfalls. It's easie

Related: Latacora's (2019) article, How (not) to sign a JSON object[1]. In short, nesting trees and signing them is difficult and prone to pitfalls. It's easier if the envelope holds the message as a raw string, and the signing is performed on the raw string. [1]: https://www.latacora.com/blog/2019/07/24/how-not-to/ https://www.latacora.com/blog/2019/07/24/how-not-to/