IETF Logo Mail Archive

Re: [COSE] Call for COSE Agenda Items for IETF 113 in Vienna

Anders Rundgren <anders.rundgren.net@gmail.com> Sun, 06 March 2022 07:59 UTC

Return-Path: <anders.rundgren.net@gmail.com>
X-Original-To: cose@ietfa.amsl.com
Delivered-To: cose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EEFFB3A0147 for <cose@ietfa.amsl.com>; Sat, 5 Mar 2022 23:59:48 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.109
X-Spam-Level:
X-Spam-Status: No, score=-7.109 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, NICE_REPLY_A=-0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i5HOKAUy9ch0 for <cose@ietfa.amsl.com>; Sat, 5 Mar 2022 23:59:44 -0800 (PST)
Received: from mail-ej1-x62d.google.com (mail-ej1-x62d.google.com [IPv6:2a00:1450:4864:20::62d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5142D3A0127 for <cose@ietf.org>; Sat, 5 Mar 2022 23:59:44 -0800 (PST)
Received: by mail-ej1-x62d.google.com with SMTP id hw13so25751789ejc.9 for <cose@ietf.org>; Sat, 05 Mar 2022 23:59:44 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=message-id:date:mime-version:user-agent:subject:content-language:to :cc:references:from:in-reply-to:content-transfer-encoding; bh=tkp6+u7pvEbMpS0D/maOStUjlcxK6AMt3fkDMSSeWNc=; b=lDmN/+7tCihx2OFpJR5ObdaL4ty8BbD2DcugBAjDdcSCgZCpUkU/e846Fzq5UcbVYn zdNxwR0Z+PeUP6mipNoJBUMB1kRIRyENRREuEeNumSMBIuR5hE48zNk/Dy951rlhLXKl bugxUPCRMVCoFkoVAcxpc6gZsQdjvUYszoRLZ+HhYvzNM6EeBvhRpmXJOcwlegaBgU3W oMOAHjp5ipFl9Owb56egv5W8v6iw+6ORwp92tR1LVld6rgHJlUDDJf5vEWNoj2tLZScC 8XzSV++isITEoHqXR7luHvWf5DHV1OXZ0Svo/RnTv9lWrAELulkUcsR+tF1VzDxZFaUo t5vw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:message-id:date:mime-version:user-agent:subject :content-language:to:cc:references:from:in-reply-to :content-transfer-encoding; bh=tkp6+u7pvEbMpS0D/maOStUjlcxK6AMt3fkDMSSeWNc=; b=FzHCts6jDGCJzE3DbLVIE/6leli5Emf0FhyIwskWAJXcrTn47qneVBP+oiDR2fN+6q KF9y4aaB8UmnN10rLqhkHPEld3VUOyMxWhjN77jVrMiih2HFP+cpRE2EwvDtH/IEZUDk 0QxboXSHcGkHUV8j/+j8aKFkvPIMPKLMgQrsg3TfIrHch6XLRbfc2YLX/moy7B2OKQQM 82hKgDcA3UAjEl8gHI8MH3B+jiXyDtw85AOBwULXoEDbCw7qivdxvee9YDKKdA48GLol q5uflyNQBhHwpXk4oagDK3ShPJ7XDIbVRshEllusdjTrKMMCzVnr7O2vdXUxcCYSCdlz RA3w==
X-Gm-Message-State: AOAM533sUUVaUjF17km8+JEYZJbvjei9iQqQu0fWkvqJAEGLt7yu9gev 5IlqHNw3BnYwFjqeREe/aZ9gKgWUf6A=
X-Google-Smtp-Source: ABdhPJyeM80plt1ukeF7MlBzMQaDbMjhP8vYRb1KrYLYH/HENSc3jnWYMCaQPW7JA2cH/pTccmIO6g==
X-Received: by 2002:a17:907:869f:b0:6da:888b:4258 with SMTP id qa31-20020a170907869f00b006da888b4258mr5080644ejc.720.1646553582305; Sat, 05 Mar 2022 23:59:42 -0800 (PST)
Received: from [192.168.1.67] (25.131.146.77.rev.sfr.net. [77.146.131.25]) by smtp.googlemail.com with ESMTPSA id bx1-20020a0564020b4100b00410f01a91f0sm4494747edb.73.2022.03.05.23.59.40 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sat, 05 Mar 2022 23:59:41 -0800 (PST)
Message-ID: <3d52876b-9830-c4e3-4424-fd4ed05efdcc@gmail.com>
Date: Sun, 6 Mar 2022 08:59:39 +0100
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.6.1
Content-Language: en-US
To: Mike Jones <Michael.Jones=40microsoft.com@dmarc.ietf.org>, Ivaylo Petrov <ivaylo@ackl.io>
Cc: "cose@ietf.org" <cose@ietf.org>
References: <SJ0PR00MB1005EA90BCD2C08608D590B8F53B9@SJ0PR00MB1005.namprd00.prod.outlook.com> <SJ0PR00MB1005C41D9B3A3E2F93C9B9E6F5049@SJ0PR00MB1005.namprd00.prod.outlook.com> <PH0PR00MB100073653F3A4218BCF7B1B1F5079@PH0PR00MB1000.namprd00.prod.outlook.com>
From: Anders Rundgren <anders.rundgren.net@gmail.com>
In-Reply-To: <PH0PR00MB100073653F3A4218BCF7B1B1F5079@PH0PR00MB1000.namprd00.prod.outlook.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/cose/_Cq5sa3uaGUhNrMKKHPkRoWOeRc>
Subject: Re: [COSE] Call for COSE Agenda Items for IETF 113 in Vienna
X-BeenThere: cose@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: CBOR Object Signing and Encryption <cose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/cose>, <mailto:cose-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cose/>
List-Post: <mailto:cose@ietf.org>
List-Help: <mailto:cose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/cose>, <mailto:cose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 06 Mar 2022 07:59:49 -0000

On 2022-03-06 3:33, Mike Jones wro

> Dear COSE working group members,
> 
> Do you have proposed agenda items for our session at IETF 113 in Vienna?  If so, please reply-all to this note.  Include a title, the presenter(s), and proposed amount of time you’d like.
> 
> We have a slot for 13:00-14:00 on Monday Afternoon.
> 
> I’m looking forward to seeing many of you in Vienna!

I don't yet have an I-D but if you want I could talk 15 minutes about a work item that combines COSE algorithms, FIDO/CTAP2, and a new CBOR based signature container.  The target is primarily payment authorizations.

An existing solution featured in Chrome and Edge browsers uses a JSON based scheme:
https://w3c.github.io/secure-payment-confirmation/#dictdef-collectedclientadditionalpaymentdata

I'm proposing using a CBOR based solution:
https://fido-web-pay.github.io/specification/crypto.html#4.3
Since COSE isn't compatible with FIDO signatures, a CBOR based signature solution needs to either enhance COSE or start-off from scratch.  I opted for the latter approach (which later this evolved into a an alternative to COSE for "regular" applications as well).

Thanx,
Anders

> 
>                                           -- Mike, for the COSE Working Group Chairs
> 
> 
> _______________________________________________
> COSE mailing list
> COSE@ietf.org
> https://www.ietf.org/mailman/listinfo/cose

v2.8.7 | Report a Bug | By Email