[Cbor] draft-ietf-cbor-tags-oid, applicability to Private Enterprise Numbers

[Brendan Moran <[e-mail]>]

It seems to me that Private Enterprise Numbers (PENs) are a particularly unique use case. It seems reasonable to predict that users of PENs will want the ability to encode these in CBOR. Given that there is a large number of registrations under the PEN prefix, it seems to me that this is a reasonable case in which to allocate a tag.

I propose that we add a new tag, 112, with the same semantics as 110 except that the OID is always relative to the IANA PEN OID (1.3.6.1.4.1)

While it would be preferable to encode a simple number, IANA’s PEN registration page says:

If you are not sure whether your organization has registered a PEN, please check the registry<http://www.iana.org/assignments/enterprise-numbers>. If your organization does have a PEN, we recommend obtaining a sub-assignment from the contact listed in the registry.

This means that we should probably maintain X.690 Clause 8.20 semantics in the body.

If this proposal is adopted, I intend to write it into SUIT manifests. While it makes no size or semantic difference in SUIT—using tag 110 is fine and unambiguous in this context—I think that a dedicated tag is a better option.

Best Regards,
Brendan
IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.