Re: [COSE] [IANA #1284212] expert review for draft-ietf-cose-cwt-claims-in-headers (cose)

Hi Mike,

the text of -09 is not yet in the repository, so I made a pull request to the state of main in https://github.com/tplooker/draft-ietf-cose-cwt-claims-in-headers:

https://github.com/tplooker/draft-ietf-cose-cwt-claims-in-headers/pull/14

This PR avoids the nebulous term profile introduced in -09.
It also makes the requirement for indicating the intended interpretation a protocol requirement, instead of burying it in the security considerations.
It is explicit that it is the security (integrity protection and authentication) of the *combination* of the CWT Claims header parameter and of the method of conveying the intended interpretation governs the allowable usage of the interpreted information.

Grüße, Carsten

> On 2023-11-14, at 19:09, Michael Jones <michael_b_jones@hotmail.com> wrote:
> 
> Hi Francesca,
> 
> Now that we have an agreed-upon strategy in which the lake-edhoc and draft-ietf-cose-cwt-claims-in-headers header parameters are distinct, can you please reply-all updating your review to approve the registration?  That should put us in good shape for the November 30th Telechat.
> 
> FYI, Hannes replied updating his IoTDir review saying that the spec is ready - which he did in response to the security considerations updates we made together in https://www.ietf.org/archive/id/draft-ietf-cose-cwt-claims-in-headers-09.html.
> 
> Carsten, in response to your feedback, -09 now also says that the profile used defines the semantics for the CWT claims used.
> 
>                                Thanks both,
>                                -- Mike
> 
> -----Original Message-----
> From: COSE <cose-bounces@ietf.org> On Behalf Of Michael Jones
> Sent: Thursday, November 9, 2023 3:54 AM
> To: Carsten Bormann <cabo@tzi.org>
> Cc: Francesca Palombini <francesca.palombini@ericsson.com>; paul.wouters@aiven.io; lgl island-resort.com <lgl@island-resort.com>; drafts-expert-review-comment@iana.org; cose@ietf.org
> Subject: Re: [COSE] [IANA #1284212] expert review for draft-ietf-cose-cwt-claims-in-headers (cose)
> 
> I created https://github.com/tplooker/draft-ietf-cose-cwt-claims-in-headers/pull/13 to describe the non-CBOR payload use case in response to Hannes' IotDir review.  It also says that profiles define the semantics of the claims used, in response to further feedback from Carsten.
> 
> Reviews requested!
> 
>                                -- Mike
> 
> -----Original Message-----
> From: Carsten Bormann <cabo@tzi.org>
> Sent: Wednesday, November 8, 2023 11:46 AM
> To: Michael Jones <michael_b_jones@hotmail.com>
> Cc: Francesca Palombini <francesca.palombini@ericsson.com>; paul.wouters@aiven.io; lgl island-resort.com <lgl@island-resort.com>; drafts-expert-review-comment@iana.org; cose@ietf.org
> Subject: Re: [COSE] [IANA #1284212] expert review for draft-ietf-cose-cwt-claims-in-headers (cose)
> 
> Hi Mike,
> 
> I was planning to send you (a PR with) some clarifying editorial changes first.
> The week is quite full...
> 
> Grüße, Carsten
> 
> 
>> On Nov 8, 2023, at 00:29, Michael Jones <michael_b_jones@hotmail.com> wrote:
>> 
>> As designated experts, can you please reply-all saying that you approve of the registration proposed in https://www.ietf.org/archive/id/draft-ietf-cose-cwt-claims-in-headers-08.html
> 
> 
> _______________________________________________
> COSE mailing list
> COSE@ietf.org
> https://www.ietf.org/mailman/listinfo/cose