IETF Logo Mail Archive

Re: [COSE] Pull-request addressing issues #29 #30 #31 #33 in draft-ietf-cose-x509-08

Michael Richardson <mcr+ietf@sandelman.ca> Fri, 12 March 2021 21:35 UTC

Return-Path: <mcr@sandelman.ca>
X-Original-To: cose@ietfa.amsl.com
Delivered-To: cose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F9533A1472 for <cose@ietfa.amsl.com>; Fri, 12 Mar 2021 13:35:38 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.232
X-Spam-Level:
X-Spam-Status: No, score=-1.232 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_HELO_FCRDNS=0.001, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id usibgg7BfFKs for <cose@ietfa.amsl.com>; Fri, 12 Mar 2021 13:35:36 -0800 (PST)
Received: from relay.sandelman.ca (minerva.sandelman.ca [IPv6:2a01:7e00::3d:b000]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 40FC03A1471 for <cose@ietf.org>; Fri, 12 Mar 2021 13:35:36 -0800 (PST)
Received: from dooku.sandelman.ca (cpe788a207f397a-cmbc4dfb96bb50.sdns.net.rogers.com [174.116.121.43]) by relay.sandelman.ca (Postfix) with ESMTPS id EE5A91F44E; Fri, 12 Mar 2021 21:35:34 +0000 (UTC)
Received: by dooku.sandelman.ca (Postfix, from userid 179) id 0B4C51A02B8; Fri, 12 Mar 2021 16:35:34 -0500 (EST)
From: Michael Richardson <mcr+ietf@sandelman.ca>
To: John Mattsson <john.mattsson=40ericsson.com@dmarc.ietf.org>, Carsten Bormann <cabo@tzi.org>, cose <cose@ietf.org>
In-reply-to: <8D49BABD-474A-4FD8-B1EF-967A9D30E646@ericsson.com>
References: <FE8C6CA0-DC5B-4A12-B467-957A9C1CD1BF@ericsson.com> <394D515A-62ED-4C0A-A2F0-B8686904F979@tzi.org> <43FF858C-455F-4A3E-8FC0-1B64D715518E@ericsson.com> <8D49BABD-474A-4FD8-B1EF-967A9D30E646@ericsson.com>
Comments: In-reply-to John Mattsson <john.mattsson=40ericsson.com@dmarc.ietf.org> message dated "Fri, 12 Mar 2021 07:35:32 +0000."
X-Mailer: MH-E 8.6+git; nmh 1.7.1; GNU Emacs 26.3
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg="pgp-sha512"; protocol="application/pgp-signature"
Date: Fri, 12 Mar 2021 16:35:34 -0500
Message-ID: <1479664.1615584934@dooku>
Archived-At: <https://mailarchive.ietf.org/arch/msg/cose/kw3a5XDN0ME_xYCMuMwJ47cowDA>
Subject: Re: [COSE] Pull-request addressing issues #29 #30 #31 #33 in draft-ietf-cose-x509-08
X-BeenThere: cose@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: CBOR Object Signing and Encryption <cose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/cose>, <mailto:cose-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cose/>
List-Post: <mailto:cose@ietf.org>
List-Help: <mailto:cose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/cose>, <mailto:cose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 12 Mar 2021 21:35:39 -0000

John Mattsson <john.mattsson=40ericsson.com@dmarc.ietf.org> wrote:
    > New comment from Laurance on GitHub pointing out that
    > proof-of-possesion is not enough. I think this point to that COSE
    > integrity protection of the end-entity certificate needs to be MUST.

I think that the example is incorrect.

If we have to protect End-Entity certificates, then we can just put in public
keys and save hundreds of bytes.

--
Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Works
 -= IPv6 IoT consulting =-

v2.23.0 | Report a Bug | By Email