Re: [CDNi] I-D Action: draft-ietf-cdni-uri-signing-10.txt

Phil Sorber <sorber@apache.org> Tue, 18 October 2016 15:46 UTC

Return-Path: <sorber@apache.org>
X-Original-To: cdni@ietfa.amsl.com
Delivered-To: cdni@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 251FA1296AB for <cdni@ietfa.amsl.com>; Tue, 18 Oct 2016 08:46:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.35
X-Spam-Level:
X-Spam-Status: No, score=-7.35 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.431] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id as_aFSkXU8C4 for <cdni@ietfa.amsl.com>; Tue, 18 Oct 2016 08:46:06 -0700 (PDT)
Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by ietfa.amsl.com (Postfix) with SMTP id 4BF7F1295F3 for <cdni@ietf.org>; Tue, 18 Oct 2016 08:46:06 -0700 (PDT)
Received: (qmail 80302 invoked by uid 99); 18 Oct 2016 15:46:05 -0000
Received: from mail-relay.apache.org (HELO mail-relay.apache.org) (140.211.11.15) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 18 Oct 2016 15:46:05 +0000
Received: from mail-yw0-f179.google.com (mail-yw0-f179.google.com [209.85.161.179]) by mail-relay.apache.org (ASF Mail Server at mail-relay.apache.org) with ESMTPSA id 6DD701A0445 for <cdni@ietf.org>; Tue, 18 Oct 2016 15:46:05 +0000 (UTC)
Received: by mail-yw0-f179.google.com with SMTP id t192so143042021ywf.0 for <cdni@ietf.org>; Tue, 18 Oct 2016 08:46:05 -0700 (PDT)
X-Gm-Message-State: AA6/9Rm2epywC2DfwSMD4/wkVMBjNp2twwY6nhDQoEjSGoYKsimmSjgWqE8dG0HU9edUfAIQ/RTJRB/5jkm2JA==
X-Received: by 10.129.55.211 with SMTP id e202mr1275155ywa.256.1476805564576; Tue, 18 Oct 2016 08:46:04 -0700 (PDT)
MIME-Version: 1.0
References: <147556991928.12899.3720041473146885160.idtracker@ietfa.amsl.com> <E30D6B39-70EC-4345-AF5E-1698D8BD4FAD@tno.nl>
In-Reply-To: <E30D6B39-70EC-4345-AF5E-1698D8BD4FAD@tno.nl>
From: Phil Sorber <sorber@apache.org>
Date: Tue, 18 Oct 2016 15:45:53 +0000
X-Gmail-Original-Message-ID: <CABF6JR0Ak8GXicNJpf6LGyLAmZhW4zT2B3OaP_ik6nXp5dB-rQ@mail.gmail.com>
Message-ID: <CABF6JR0Ak8GXicNJpf6LGyLAmZhW4zT2B3OaP_ik6nXp5dB-rQ@mail.gmail.com>
To: "Brandenburg, R. (Ray) van" <ray.vanbrandenburg@tno.nl>, "cdni@ietf.org" <cdni@ietf.org>
Content-Type: multipart/alternative; boundary="001a1143fb7a146fcb053f2597b5"
Archived-At: <https://mailarchive.ietf.org/arch/msg/cdni/ice8yUwUZau_4G1o3yaOjQNHb90>
Subject: Re: [CDNi] I-D Action: draft-ietf-cdni-uri-signing-10.txt
X-BeenThere: cdni@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "This list is to discuss issues associated with the Interconnection of Content Delivery Networks \(CDNs\)" <cdni.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/cdni>, <mailto:cdni-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cdni/>
List-Post: <mailto:cdni@ietf.org>
List-Help: <mailto:cdni-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/cdni>, <mailto:cdni-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Oct 2016 15:46:08 -0000

Seeing as there hasn't been any negative feedback on the new direction (or
any feedback at all) I'd like to point out that we have this particular
draft in revision control in github. I've also submitted a pull request if
anyone would like to review it.

https://github.com/rayvbr/URISigningSpec/pull/5

This adds a version claim so that we can upgrade more easily and also
ignore unknown claims. We originally had a version field to begin with but
there was nothing in JWT that was similar so it was left out of the first
JWT revision. We (Matt Miller and I) also consulted with a JWT expert on
the name used and how to get it registered properly.

Thanks.

On Tue, Oct 4, 2016 at 2:34 AM Brandenburg, R. (Ray) van <
ray.vanbrandenburg@tno.nl> wrote:

> Hi all,
>
> As you can see, we’ve just uploaded a new version of the URI Signing
> document. This is a major rewrite that incorporates the decision we made in
> Berlin to base the URI Signing algorithm on JSON Web Token.
>
> There are still a few open issues, but we wanted to get the groups opinion
> on whether this is going in the right direction.
>
> Best regards,
>
> Ray
>
>
>
> On 04/10/2016, 10:31, "CDNi on behalf of internet-drafts@ietf.org" <
> cdni-bounces@ietf.org on behalf of internet-drafts@ietf.org> wrote:
>
>
>     A New Internet-Draft is available from the on-line Internet-Drafts
> directories.
>     This draft is a work item of the Content Delivery Networks
> Interconnection of the IETF.
>
>             Title           : URI Signing for CDN Interconnection (CDNI)
>             Authors         : Ray van Brandenburg
>                               Kent Leung
>                               Phil Sorber
>                               Matthew Miller
>         Filename        : draft-ietf-cdni-uri-signing-10.txt
>         Pages           : 29
>         Date            : 2016-10-04
>
>     Abstract:
>        This document describes how the concept of URI signing supports the
>        content access control requirements of CDNI and proposes a URI
>        signing method as a JSON Web Token (JWT) [RFC7519] profile.
>
>        The proposed URI signing method specifies the information needed to
>        be included in the URI to transmit the signed JWT as well as the
>        claims needed by the signed JWT to authorize a UA.  The mechanism
>        described can be used both in CDNI and single CDN scenarios.
>
>
>     The IETF datatracker status page for this draft is:
>     https://datatracker.ietf.org/doc/draft-ietf-cdni-uri-signing/
>
>     There's also a htmlized version available at:
>     https://tools.ietf.org/html/draft-ietf-cdni-uri-signing-10
>
>     A diff from the previous version is available at:
>     https://www.ietf.org/rfcdiff?url2=draft-ietf-cdni-uri-signing-10
>
>
>     Please note that it may take a couple of minutes from the time of
> submission
>     until the htmlized version and diff are available at tools.ietf.org.
>
>     Internet-Drafts are also available by anonymous FTP at:
>     ftp://ftp.ietf.org/internet-drafts/
>
>     _______________________________________________
>     CDNi mailing list
>     CDNi@ietf.org
>     https://www.ietf.org/mailman/listinfo/cdni
>
>
> This message may contain information that is not intended for you. If you
> are not the addressee or if this message was sent to you by mistake, you
> are requested to inform the sender and delete the message. TNO accepts no
> liability for the content of this e-mail, for the manner in which you use
> it and for damage of any kind resulting from the risks inherent to the
> electronic transmission of messages.
> _______________________________________________
> CDNi mailing list
> CDNi@ietf.org
> https://www.ietf.org/mailman/listinfo/cdni
>