Re: [Ace] New Version Notification - draft-ietf-ace-cwt-proof-of-possession-07.txt

[Mike Jones <[e-mail]>]

On Ben's (2): "The only things that were removed that I wanted to check if we should think about keeping was the note that the same key might be referred to by different key IDs in messages directed to different recipients.  What do people think about that?"  I'm fine restoring that text.

Could you also do that, Ludwig?

				Thanks all,
				-- Mike

-----Original Message-----
From: Ludwig Seitz <[e-mail]> 
Sent: Wednesday, September 25, 2019 2:34 AM
To: Mike Jones <[e-mail]>; Samuel Erdtman <[e-mail]>
Cc: Benjamin Kaduk <[e-mail]>; [e-mail]; [e-mail]
Subject: Re: New Version Notification - draft-ietf-ace-cwt-proof-of-possession-07.txt

On 25/09/2019 10:13, Mike Jones wrote:
> Does one of you have the time to create a PR today making the two 
> changes?  I’ll then be able to review it and publish sometime in the 
> next 24 hours.  Or if not, I’ll plan to do it myself while flying back 
> from Korea to the US tomorrow.
> 
>                                                         Thanks all,
> 
>                                                         -- Mike
> 
> *From:* Samuel Erdtman <[e-mail]>
> *Sent:* Wednesday, September 25, 2019 12:18 AM
> *To:* Ludwig Seitz <[e-mail]>
> *Cc:* Mike Jones <[e-mail]>; Benjamin Kaduk 
> <[e-mail]>; [e-mail]; 
> [e-mail]
> *Subject:* Re: New Version Notification - 
> draft-ietf-ace-cwt-proof-of-possession-07.txt
> 
> +1
> 
> On Wed, Sep 25, 2019 at 8:31 AM Ludwig Seitz <[e-mail] 
> <mailto:[e-mail]>> wrote:
> 
>     On 25/09/2019 02:23, Mike Jones wrote:
>      > I'm fine with us making both of the proposed changes.
>      >
>      >                               Thanks,
>      >                               -- Mike
>      >
> 
>     +1
> 
>     -- 
>     Ludwig Seitz, PhD
>     Security Lab, RISE
>     Phone [phone]
> 


I'm in the process of doing the PR, but I noticed that I can only 
address Ben's (1) and (3).

For (2) Ben was asking for our opinion.

I think we could take the note about different key IDs referring to the 
same key and reintroduce it in the text as it is a useful reminder.

(I mean that chunk:
" Note that the value of a Key ID is not always the same for different 
parties. When sending a COSE encrypted message with a shared key,
the Key ID may be different on both sides of the conversation,
with the appropriate one being included in the message based on the 
recipient of the message.")



/Ludwig


-- 
Ludwig Seitz, PhD
Security Lab, RISE
Phone [phone]