Re: [COSE] [Ace] Call for adoption for draft-wahlstroem-ace-cbor-web-token-00

Mike Jones <Michael.Jones@microsoft.com> Tue, 10 May 2016 08:50 UTC

Return-Path: <Michael.Jones@microsoft.com>
X-Original-To: cose@ietfa.amsl.com
Delivered-To: cose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 546B412D56E; Tue, 10 May 2016 01:50:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.792
X-Spam-Level:
X-Spam-Status: No, score=-1.792 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_DKIM_INVALID=0.01] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=fail (1024-bit key) reason="fail (message has been altered)" header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kWD2aS42PBcY; Tue, 10 May 2016 01:50:40 -0700 (PDT)
Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0129.outbound.protection.outlook.com [65.55.169.129]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 160EB12D0EC; Tue, 10 May 2016 01:50:40 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=2Pb2uuHwa6Jnqn40nZjHM/K60YjU2Fe2jk5X6obVYwc=; b=ZIXCgRcSRcQcIyBxcqyCc8nvXjHA/ZnWQvQFA1W1EHWnRPyN4YInFOi1R8GMKyhY+SpGQqpJx1p8vcntvjOJ6ImCQ7YO0z5oR97LUeythsu7gplRJaWMySvd+eUUrA/sf4nXmMo4TXu2MXm7e7fzKTHkfEy/N3AZmOS5CaXvgNM=
Received: from SN1PR0301MB1645.namprd03.prod.outlook.com (10.162.130.139) by SN1PR0301MB1648.namprd03.prod.outlook.com (10.162.130.142) with Microsoft SMTP Server (TLS) id 15.1.485.9; Tue, 10 May 2016 08:50:38 +0000
Received: from SN1PR0301MB1645.namprd03.prod.outlook.com ([10.162.130.139]) by SN1PR0301MB1645.namprd03.prod.outlook.com ([10.162.130.139]) with mapi id 15.01.0492.016; Tue, 10 May 2016 08:50:38 +0000
From: Mike Jones <Michael.Jones@microsoft.com>
To: Erik Wahlström <erik@wahlstromstekniska.se>, Justin Richer <jricher@mit.edu>
Thread-Topic: [Ace] [COSE] Call for adoption for draft-wahlstroem-ace-cbor-web-token-00
Thread-Index: AQHRqpgaOC6RkJUk/U2IOlAZ6LFfqJ+x20iA
Date: Tue, 10 May 2016 08:50:38 +0000
Message-ID: <SN1PR0301MB1645A1F955468253B8EF4782F5710@SN1PR0301MB1645.namprd03.prod.outlook.com>
References: <D356A330.34F31%kepeng.lkp@alibaba-inc.com> <57309F46.9040705@tzi.org> <89B6F196-D08F-4FBD-9F0D-5B250284048F@mit.edu> <CA+KYQAuF-AzXEBQFo0-2VoCSBnCAPTAvHRwwngDUQcFgk0Q4SQ@mail.gmail.com>
In-Reply-To: <CA+KYQAuF-AzXEBQFo0-2VoCSBnCAPTAvHRwwngDUQcFgk0Q4SQ@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: wahlstromstekniska.se; dkim=none (message not signed) header.d=none; wahlstromstekniska.se; dmarc=none action=none header.from=microsoft.com;
x-originating-ip: [86.110.65.6]
x-ms-office365-filtering-correlation-id: 739799e7-b7da-4bfd-ed62-08d378b028c5
x-microsoft-exchange-diagnostics: 1; SN1PR0301MB1648; 5:K7Id0ATTLRgZvJbTnnlc06Wik3fklcDLwhFjrTXVUhOs7ZLB9rZ9vKoF32KEKZ3GmyTNyWBT2j/Qq0UqMyAidTJkY8BBX9sex2PfjxUfPh/FchNhiqIQz0/IoKdB6zwjr0kv47w0r3JLWO+p59/Www==; 24:GkraLZES7gpCh9GvOcxpnAtodVePBbUYq4KQqVONY5cwnIP/opCoMnaTqZ47uH1VH+1gGCZPn8ao2XOr/WnyiZsS7rB54UxFip5kbMzjqo0=; 7:I7HvaxNOca1PiuxDXJTZrycBzcztCmtk7kwVbcEox6ebrphSf+KJJLW0ebLIuJlABwAq6hPGM0io1oHQaiBzxCLBUN3k1v+sRlkxarMkL0Awrz05v3p+QO1emjbCz+Jz5gVBJQNj1GcrZhrbZqMvj7wi7mW6d66S1WwswgNjyqbA7S5fT0L6QmlH9FWpXpO6YDeZdOM0Z+3j+686i35n7Q==
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:SN1PR0301MB1648;
x-microsoft-antispam-prvs: <SN1PR0301MB16483355B81355B5179383BFF5710@SN1PR0301MB1648.namprd03.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:;
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026)(61426038)(61427038); SRVR:SN1PR0301MB1648; BCL:0; PCL:0; RULEID:; SRVR:SN1PR0301MB1648;
x-forefront-prvs: 0938781D02
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(377454003)(24454002)(74316001)(76576001)(92566002)(11100500001)(5003600100002)(8936002)(3280700002)(19609705001)(81166005)(19580395003)(3660700001)(9686002)(19580405001)(19617315012)(10090500001)(5002640100001)(10290500002)(10400500002)(5005710100001)(2950100001)(50986999)(87936001)(2171001)(2906002)(5008740100001)(66066001)(1220700001)(33656002)(230783001)(5001770100001)(54356999)(76176999)(16236675004)(99286002)(86362001)(122556002)(4326007)(77096005)(106116001)(19300405004)(790700001)(586003)(102836003)(6116002)(15975445007)(189998001)(19625215002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN1PR0301MB1648; H:SN1PR0301MB1645.namprd03.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en;
spamdiagnosticoutput: 1:23
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_SN1PR0301MB1645A1F955468253B8EF4782F5710SN1PR0301MB1645_"
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 10 May 2016 08:50:38.1134 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN1PR0301MB1648
Archived-At: <http://mailarchive.ietf.org/arch/msg/cose/6oMiWSmtBe2IbULmqLQQ-1MaYL4>
Cc: Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com>, Kepeng Li <kepeng.lkp@alibaba-inc.com>, "ace@ietf.org" <ace@ietf.org>, Carsten Bormann <cabo@tzi.org>, Hannes Tschofenig <hannes.tschofenig@gmx.net>, "<oauth@ietf.org>" <oauth@ietf.org>, cose <cose@ietf.org>
Subject: Re: [COSE] [Ace] Call for adoption for draft-wahlstroem-ace-cbor-web-token-00
X-BeenThere: cose@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: CBOR Object Signing and Encryption <cose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/cose>, <mailto:cose-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cose/>
List-Post: <mailto:cose@ietf.org>
List-Help: <mailto:cose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/cose>, <mailto:cose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 May 2016 08:50:43 -0000

I also feel strongly that the name should remain CBOR Web Token.  CWT is a beneficiary of the intellectual and deployment heritage from the Simple Web Token (SWT) and JSON Web Token (JWT).  CWT is intentionally parallel to JWT.  The name should stay parallel as well.

The “Web” part of the “CBOR Web Token” name can be taken as a reference to the Web of Things (see https://en.wikipedia.org/wiki/Web_of_Things).  As Erik correctly points out JSON is not the only data representation that makes things in the Web and the Web of Things.

                                                          -- Mike

From: Ace [mailto:ace-bounces@ietf.org] On Behalf Of Erik Wahlström
Sent: Tuesday, May 10, 2016 1:44 AM
To: Justin Richer <jricher@mit.edu>
Cc: Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com>; Kepeng Li <kepeng.lkp@alibaba-inc.com>; ace@ietf.org; Carsten Bormann <cabo@tzi.org>; Hannes Tschofenig <hannes.tschofenig@gmx.net>; <oauth@ietf.org> <oauth@ietf.org>; cose <cose@ietf.org>
Subject: Re: [Ace] [COSE] Call for adoption for draft-wahlstroem-ace-cbor-web-token-00

Or keep the CBOR Web Token (CWT) for two major reasons:
- To show the very close relationship to JWT. It relies heavily on JWT and it's iana registry. It is essentially a JWT but in CBOR/COSE instead of JSON/JOSE.
- I would not say that JWT is the only format that works for the web, and it's even used in other, non-traditional, web protocols. That means I don't have a problem with the W in CWT at all. Why would JSON be the only web protocol?

Then we also have one smaller (a lot smaller) reason, it's the fact that it can be called "cot" just like JWT is called a "jot" and I figured that our "cozy chairs" would very much like that fact because then it's essentially a "cozy cot" :)

/ Erik


On Tue, May 10, 2016 at 2:49 AM, Justin Richer <jricher@mit.edu<mailto:jricher@mit.edu>> wrote:
We can also call it the “COSE Token”. As a chair of the COSE working group, I’m fine with that amount of co-branding.

 — Justin

> On May 9, 2016, at 9:31 AM, Carsten Bormann <cabo@tzi.org<mailto:cabo@tzi.org>> wrote:
>
>> draft-ietf-ace-cbor-token-00.txt;
>
> For the record, I do not think that ACE has a claim on the term "CBOR
> Token".  While the term token is not used in RFC 7049, there are many
> tokens that could be expressed in CBOR or be used in applying CBOR to a
> problem.
>
> ACE CBOR Token is fine, though.
> (Or, better, CBOR ACE Token, CAT.)
>
> Grüße, Carsten
>
> _______________________________________________
> COSE mailing list
> COSE@ietf.org<mailto:COSE@ietf.org>
> https://www.ietf.org/mailman/listinfo/cose

_______________________________________________
Ace mailing list
Ace@ietf.org<mailto:Ace@ietf.org>
https://www.ietf.org/mailman/listinfo/ace