Re: [Jose-reg-review] Review requested: draft-ietf-stir-passport

Jim Schaad <ietf@augustcellars.com> Tue, 18 October 2016 20:04 UTC

From: Jim Schaad <ietf@augustcellars.com>
To: 'Robert Sparks' <rjsparks@nostrum.com>, jose-reg-review@ietf.org
References: <74d2dbc3-7de7-bb4f-5e9f-5152f76dfd10@nostrum.com>
In-Reply-To: <74d2dbc3-7de7-bb4f-5e9f-5152f76dfd10@nostrum.com>
Date: Tue, 18 Oct 2016 13:04:30 -0700
Message-ID: <055201d2297a$d856c5c0$89045140$@augustcellars.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_0553_01D22940.2BF92640"
Content-Language: en-us
Thread-Index: AQI61KekfCopLPVnn2FhBJuAsIStnp/dS/GQ
Archived-At: <https://mailarchive.ietf.org/arch/msg/jose-reg-review/DXbAP-ltvXTen7byZ8F6cU3l6OY>
Cc: chris_wendt@cable.comcast.com, 'Russ Housley' <housley@vigilsec.com>, 'Alissa Cooper' <alissa@cooperw.in>, 'Jon Peterson' <jon.peterson@gmail.com>
Subject: Re: [Jose-reg-review] Review requested: draft-ietf-stir-passport
Precedence: list

The changes with -09 deal with all of the issues I had on this.  Registration approval should be forthcoming.  I need to figure out the exact procedures for letting IANA know.

 

Jim

 

 

From: Jose-reg-review [mailto:jose-reg-review-bounces@ietf.org] On Behalf Of Robert Sparks
Sent: Tuesday, October 18, 2016 11:51 AM
To: jose-reg-review@ietf.org
Cc: chris_wendt@cable.comcast.com; Russ Housley <housley@vigilsec.com>; Alissa Cooper <alissa@cooperw.in>; Jon Peterson <jon.peterson@gmail.com>
Subject: [Jose-reg-review] Review requested: draft-ietf-stir-passport

 

Please review the registration request in section 11.3 ( key elements copied below for convenience) at

 <https://datatracker.ietf.org/doc/draft-ietf-stir-passport/> <https://datatracker.ietf.org/doc/draft-ietf-stir-passport/>

Robert Sparks - STIR WG co-chair

------------

11.3.  JSON Web Signature and Encryption Header Parameter Registry
 
11.3.1.  Registry Contents Additions Requested
 
   Header Parameter Name: "ppt"
 
   o  Header Parameter Description: PASSporT extension identifier
 
   o  Header Parameter Usage Location(s): JWS
 
   o  Change Controller: IESG
 
   o  Specification Document(s): Section 8.1 of [RFCThis]
 
--------------
 
8.1.  "ppt" (PASSporT) header parameter
 
   Any using protocol can extend the payload of PASSporT with additional
   JWT claims.  JWT claims are managed by an existing IANA registry as
   defined in [RFC7519] Section 10.1.  Implementations of PASSporT MUST
   support the baseline claims defined in Section 5.2, and MAY support
   extended claims.  If it is necessary for an extension to PASSporT to
   require that a relying party support a particular extended claim or
   set of claims in the PASSporT object, it can do so by specifying a
   "ppt" element for the PASSporT JOSE header.  All values of "ppt" need
   to be defined in a specification which associates the new value of
   the "ppt" element with the required claims and behaviors.  Relying
   parties MUST fail to validate PASSporT objects containing an
   unsupported "ppt".
 
   Using protocols MUST explicitly define the how each claim is carried
   in the using protocol and the rules for how the header and payload
   objects are constructed beyond the lexicographical and serialization
   rules defined in this document.
 
   Using protocols that carry the compact form of PASSporT, defined in
   Section 7, instead of the full form MUST use only mandatory
   extensions signaled with "ppt" - if a using protocol were to add
   additional optional claims to a PASSporT object it carried in compact
   form, relying parties would have no way to reconstruct the token.
   Moreover, using protocols that support the compact form of PASSporT
   MUST have some field to signal "ppt" to relying parties, as the
   compact form of PASSporT omits the JOSE header.

[Jose-reg-review] Review requested: draft-ietf-st… Robert Sparks
Re: [Jose-reg-review] Review requested: draft-iet… Jim Schaad