Script updating gh-pages from 592c2ab. [ci skip]

bc-workload-id-token/draft-sheffer-wimse-s2s-protocol.html

@@ -1372,7 +1372,8 @@ <h3 id="name-the-workload-identity-token">
                 <p id="section-3.1-2.2.2.4.1"><code>jti</code>: A unique identifier for the token.<a href="#section-3.1-2.2.2.4.1" class="pilcrow">¶</a></p>
 </li>
               <li class="normal" id="section-3.1-2.2.2.5">
-                <p id="section-3.1-2.2.2.5.1"><code>cnf</code>: A confirmation claim containing the public key of the workload using the <code>jwk</code> member as defined in <span><a href="https://rfc-editor.org/rfc/rfc7800#section-3.2" class="relref">Section 3.2</a> of [<a href="#RFC7800" class="cite xref">RFC7800</a>]</span>.<a href="#section-3.1-2.2.2.5.1" class="pilcrow">¶</a></p>
+                <p id="section-3.1-2.2.2.5.1"><code>cnf</code>: A confirmation claim containing the public key of the workload using the <code>jwk</code> member as defined in <span><a href="https://rfc-editor.org/rfc/rfc7800#section-3.2" class="relref">Section 3.2</a> of [<a href="#RFC7800" class="cite xref">RFC7800</a>]</span>.
+   The workload <span class="bcp14">MUST</span> prove possession of the corresponding private key when presenting the WIT to another party.<a href="#section-3.1-2.2.2.5.1" class="pilcrow">¶</a></p>
 </li>
             </ul>
 </li>

bc-workload-id-token/draft-sheffer-wimse-s2s-protocol.txt

@@ -224,7 +224,9 @@ Table of Contents
 
       -  cnf: A confirmation claim containing the public key of the
          workload using the jwk member as defined in Section 3.2 of
-         [RFC7800].
+         [RFC7800].  The workload MUST prove possession of the
+         corresponding private key when presenting the WIT to another
+         party.
 
    An example WIT might look like this (all examples, of course, are
    non-normative and with line breaks and extra space for readability):