Re: [core] [Anima] date-and-time and "created-on" field in constrained-voucher

Jürgen Schönwälder <j.schoenwaelder@jacobs-university.de> Wed, 29 June 2022 01:54 UTC

Date: Wed, 29 Jun 2022 03:54:29 +0200
From: Jürgen Schönwälder <j.schoenwaelder@jacobs-university.de>
To: Carsten Bormann <cabo@tzi.org>
Cc: Andy Bierman <andy@yumaworks.com>, anima@ietf.org, Core <core@ietf.org>
Message-ID: <20220629015429.vfps46mvcb7io67o@anna>
Reply-To: Jürgen Schönwälder <j.schoenwaelder@jacobs-university.de>
Mail-Followup-To: Carsten Bormann <cabo@tzi.org>, Andy Bierman <andy@yumaworks.com>, anima@ietf.org, Core <core@ietf.org>
References: <24048.1656352364@localhost> <25937.1656365067@localhost> <CABCOCHS6=F0tfESkVmOk1AFKvsu4tRfKu9A_Sgz5swVXv-eXCQ@mail.gmail.com> <26870.1656383550@localhost> <CABCOCHSkh95PEEM5E3YKe_yc5VmsY90XxT1D-z3AiJwwcG-HhA@mail.gmail.com> <7669.1656440710@localhost> <6DCC06F4-3799-4CC0-8780-21E6B12A4022@tzi.org> <CABCOCHQqtKw6cZ1o7nzDmQBN0zQP70CgeAAc6nFdRa_kB+-DBQ@mail.gmail.com> <09C66776-54C5-4C5D-9DFA-E164A1050170@tzi.org> <E51C95DD-0AC5-40E4-8609-E0B444E77786@tzi.org>
Content-Type: text/plain; charset="utf-8"
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <E51C95DD-0AC5-40E4-8609-E0B444E77786@tzi.org>
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: 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
X-OriginatorOrg: jacobs-university.de
X-MS-Exchange-CrossTenant-Network-Message-Id: a20a89c0-8563-472f-8418-08da59724eb8
X-MS-Exchange-CrossTenant-AuthSource: GVXP190MB1991.EURP190.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Jun 2022 01:54:30.9455 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: f78e973e-5c0b-4ab8-bbd7-9887c95a8ebd
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: G62JzKNswwnnQNZmcPp8SB9GAkpl1DUrHLG7fvBNByYEXke9pv0LiOGXK2oMXvOWIQ+HFlg0BKxB20COYaivyI6uRot4KdCIesU7lHyGb10=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS4P190MB1854
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/M33K1H8FF18MtODDYwrOw53rdu0>
Subject: Re: [core] [Anima] date-and-time and "created-on" field in constrained-voucher
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 29 Jun 2022 01:54:41 -0000

On Tue, Jun 28, 2022 at 11:40:55PM +0200, Carsten Bormann wrote:
> On 2022-06-28, at 22:50, Carsten Bormann <cabo@tzi.org> wrote:
> > 
> > The alternative would be to trigger on the data, so any string that looks like 2022-06-28T20:48:15Z would turn into 1(1656449295).  That has some interesting security considerations, though.
> 
> Hmm, that is starting to become more attractive to me.
> 
> As long as we can make sure that the same string comes back out again, this can be safe even if we don’t get the typenames right.
> 
> Of course an efficient implementation might still be triggered by typenames, but it wouldn’t create a problem if that guesses wrong.
>

This sounds super scary. So how in CBOR would you make sure that the
timezone suffix Z remains Z and the suffix +00:00 remains +00:00?

/js

-- 
Jürgen Schönwälder              Jacobs University Bremen gGmbH
Phone: +49 421 200 3587         Campus Ring 1 | 28759 Bremen | Germany
Fax:   +49 421 200 3103         <https://www.jacobs-university.de/>

[core] date-and-time and "created-on" field in co… Michael Richardson
Re: [core] date-and-time and "created-on" field i… Michael Richardson
Re: [core] date-and-time and "created-on" field i… Andy Bierman
Re: [core] date-and-time and "created-on" field i… Michael Richardson
Re: [core] date-and-time and "created-on" field i… Michael Richardson
Re: [core] date-and-time and "created-on" field i… Andy Bierman
Re: [core] date-and-time and "created-on" field i… Michael Richardson
Re: [core] date-and-time and "created-on" field i… Carsten Bormann
Re: [core] date-and-time and "created-on" field i… Andy Bierman
Re: [core] date-and-time and "created-on" field i… Carsten Bormann
Re: [core] date-and-time and "created-on" field i… Andy Bierman
Re: [core] date-and-time and "created-on" field i… Jürgen Schönwälder
Re: [core] date-and-time and "created-on" field i… Andy Bierman
Re: [core] [Anima] date-and-time and "created-on"… Carsten Bormann
Re: [core] [Anima] date-and-time and "created-on"… Carsten Bormann
Re: [core] [Anima] date-and-time and "created-on"… Jürgen Schönwälder
Re: [core] [Anima] date-and-time and "created-on"… Carsten Bormann
Re: [core] date-and-time and "created-on" field i… Michael Richardson
Re: [core] [Anima] date-and-time and "created-on"… Andy Bierman
Re: [core] [Anima] date-and-time and "created-on"… Carsten Bormann
Re: [core] [Anima] date-and-time and "created-on"… Andy Bierman
Re: [core] [Anima] date-and-time and "created-on"… Carsten Bormann
Re: [core] [Anima] date-and-time and "created-on"… Andy Bierman
Re: [core] [Anima] date-and-time and "created-on"… Carsten Bormann
Re: [core] [Anima] date-and-time and "created-on"… Andy Bierman