2017-11-30 UTC
# 
dlongley those are the main differences... but we didn't see a lot of uptake on EncryptedMessage2012 ... and we don't really use it very much ourselves (we don't use really use JOSE either), we have stronger needs for signatures than we do encryption of message payloads... should a stronger need arise we'd explore the options again, but if JWE does what you need, it's not *that* different, it is mostly lacking in a key discovery protocol