@@ -115,6 +115,9 @@ def __signature_to_member(sig: JSONSignatureDict, registry: JWSRegistry) -> Head
 
 def verify_general_json(obj: GeneralJSONSignature, registry: JWSRegistry, find_key: FindKey) -> bool:
     payload_segment = obj.segments["payload"]
+    if not obj.signatures:
+        return False
+
     for index, signature in enumerate(obj.signatures):
         member = obj.members[index]
         if not verify_signature(member, signature, payload_segment, registry, find_key):
 
@@ -106,6 +106,13 @@ def test_bad_signature(self):
         value = serialize_json([member], b"hello", key1)
         self.assertRaises(BadSignatureError, deserialize_json, value, key2)
 
+    def test_general_json_with_empty_signatures(self):
+        data: GeneralJSONSerialization = {
+            "payload": "eyJ1c2VyIjoiYWRtaW4ifQ",
+            "signatures": [],
+        }
+        self.assertRaises(BadSignatureError, deserialize_json, data, self.key)
+
     def test_with_public_header(self):
         key: RSAKey = load_key("rsa-openssl-private.pem")
         member: HeaderDict = {"header": {"alg": "RS256", "kid": "abc"}}