Re: [COSE] CBOR Object Signing and Encryption (cose) WG Virtual Meeting: 2021-10-12

Hi,

Some comments on the agenda:

> - cbor-encoded-cert-02

The base specification of C509 has now been stable for a while and there is not much updates since IETF 111. We were hoping to get some reviews on in particular the new supported extensions and the specification of CSRs and CRLs. Unless there is some new input before the interim, I don't how we should make use of this agenda slot.

> other topics

A topic which we may want to discuss is the use of CBOR Web Tokens (CWT) as authentication credentials in COSE, analogous to how [1] describe the use of X.509.

In LAKE we have defined COSE header parameters for CWTs and CWT Claims Sets containing a COSE key, and will cover their use with EDHOC. But there is more that can be said how they should be used in general, associated security considerations, etc. Basically what [1] specifies about x5u, x5t, x5chain and x5bag. Both TLS and LAKE are discussing the use of CWTs so I think this would be a valuable contribution from the COSE WG.

Göran

[1] https://datatracker.ietf.org/doc/html/draft-ietf-cose-x509
[2] https://datatracker.ietf.org/doc/html/draft-ietf-lake-edhoc-11#section-9.6

From: Ivaylo Petrov <ivaylo@ackl.io>
Date: Tuesday, 28 September 2021 at 21:36
To: cose <cose@ietf.org>
Cc: Cose Chairs Wg <cose-chairs@ietf.org>
Subject: Re: [COSE] CBOR Object Signing and Encryption (cose) WG Virtual Meeting: 2021-10-12
Dear all,

We believe the working group might benefit from an interim meeting to
discuss some of the topics raised recently on the mailing list as well
as to try to make progress on some of the pending WG deliverables. We
have aimed to position the meeting in such a way that it should not be
in conflict with other known activities and it will allow us to have
some more time before the next IETF for follow-ups on the discussions.
In case this time does not work for you, please let us know and we
will consider moving the meeting (for example a week later). If you
believe other topics than the ones mentioned in the preliminary agenda
should be discussed, please also let us know!

Thanks,
Mike, Matthew and Ivaylo,
COSE chairs

On Tue, Sep 28, 2021 at 6:32 PM IESG Secretary <iesg-secretary@ietf.org> wrote:
>
> The CBOR Object Signing and Encryption (cose) WG will hold
> a virtual interim meeting on 2021-10-12 from 17:00 to 18:00 Europe/Zurich (15:00 to 16:00 UTC).
>
> Agenda:
> Preliminary agenda
>
> - kid supports ints
> - x509 and -bis documents advancement
> - cbor-encoded-cert-02
>
> Information about remote participation:
> https://ietf.webex.com/ietf/j.php?MTID=m6b66a43453dc56d79470f8cbee292bca
>
> _______________________________________________
> COSE mailing list
> COSE@ietf.org
> https://www.ietf.org/mailman/listinfo/cose