Re: [jose] Adding a X509/PKIX JWK type? [WAS: issues with x5c in JWE]
Brian Campbell <bcampbell@pingidentity.com> Fri, 08 February 2013 22:46 UTC
Return-Path: <bcampbell@pingidentity.com>
X-Original-To: jose@ietfa.amsl.com
Delivered-To: jose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C03D021F8B64 for <jose@ietfa.amsl.com>; Fri, 8 Feb 2013 14:46:19 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.893
X-Spam-Level:
X-Spam-Status: No, score=-5.893 tagged_above=-999 required=5 tests=[AWL=0.083, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8BWHPip3VsrB for <jose@ietfa.amsl.com>; Fri, 8 Feb 2013 14:46:18 -0800 (PST)
Received: from na3sys009aog103.obsmtp.com (na3sys009aog103.obsmtp.com [74.125.149.71]) by ietfa.amsl.com (Postfix) with ESMTP id 9805D21F8B48 for <jose@ietf.org>; Fri, 8 Feb 2013 14:46:18 -0800 (PST)
Received: from mail-ob0-f197.google.com ([209.85.214.197]) (using TLSv1) by na3sys009aob103.postini.com ([74.125.148.12]) with SMTP ID DSNKURWAOr4sulln3s8KywGu5IVPWm+S3cMR@postini.com; Fri, 08 Feb 2013 14:46:18 PST
Received: by mail-ob0-f197.google.com with SMTP id ta14so20787732obb.8 for <jose@ietf.org>; Fri, 08 Feb 2013 14:46:17 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-received:x-received:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type:x-gm-message-state; bh=oh5iPiDihg/c7/T3hTlxlQSUeIdlw0eWJ3ogcVw1Klo=; b=GmOu6s9GaDUqhZVuzA69niClbZMqVUBvhrBJLcOr1yszmKItg+t6InbhZa1hA/19tW xTzVNLsTZKJv0/v8fqUcaOpjdP+B//ZtqPMY+lPs1vFFFQMveEsT1/DwHL7u5ZVJzbYa ANkeALW+WNfC+Xokv4VNi/traclOmHnoJ95UtbMMEVG8TOwEPsq27a0x0xUhz8UfxPJu xaOsXdE4OvxCaZrMVDuwBa6SlbTWV8ii5PQBTYtjGb6NuxV2ffmZjzFZZGZ4S04U0xe8 x8J2NNBohBOAtF2/YBYFuZTxFNg66fZTFevc4OTW/BSypBCxErrxigXwerFyOnPOLD56 3tlw==
X-Received: by 10.50.180.197 with SMTP id dq5mr5886022igc.22.1360363577710; Fri, 08 Feb 2013 14:46:17 -0800 (PST)
X-Received: by 10.50.180.197 with SMTP id dq5mr5886007igc.22.1360363577591; Fri, 08 Feb 2013 14:46:17 -0800 (PST)
MIME-Version: 1.0
Received: by 10.64.139.8 with HTTP; Fri, 8 Feb 2013 14:45:47 -0800 (PST)
In-Reply-To: <51155CF3.7060203@stpeter.im>
References: <CA+k3eCRbkefo3M+7QK_anM+H-VQLj2b+Jvw+8EXKPnSuc4Y_7Q@mail.gmail.com> <DAD9D0F9-1889-41B8-8F87-2FC689E9397B@ve7jtb.com> <CA+k3eCQqTpiTdDwdkqFNU9UApM8H4TjjkKq+XupSQuhLkbjRsg@mail.gmail.com> <BF7E36B9C495A6468E8EC573603ED94115109840@xmb-aln-x11.cisco.com> <0BC322C1-A6C5-46B8-BC2A-3A7E000952EF@ve7jtb.com> <CA+k3eCTi1Ss2grSALqZngtnCfv8ks0xRm_uXaeA7cdngua4_VQ@mail.gmail.com> <BF7E36B9C495A6468E8EC573603ED9411510A1F3@xmb-aln-x11.cisco.com> <BF7E36B9C495A6468E8EC573603ED9411511DB49@xmb-aln-x11.cisco.com> <51155CF3.7060203@stpeter.im>
From: Brian Campbell <bcampbell@pingidentity.com>
Date: Fri, 08 Feb 2013 15:45:47 -0700
Message-ID: <CA+k3eCRMi6XOYqj__y4uxVUp_0H-3aJSCSz5gp0BOEPxWeVjAA@mail.gmail.com>
To: Peter Saint-Andre <stpeter@stpeter.im>
Content-Type: multipart/alternative; boundary="14dae9340b73cec75404d53e531e"
X-Gm-Message-State: ALoCoQkL99auh1vqaQGGsLdeDSvu9Fjrf2gfDd/UUHrciBqszPqnTuO6slIfj4AK4s4oXbslgD4cA/VJcdYh0AH7BOt8yDR3vbRH7JngNHn9DnKpn/LqeTFbyrR3E/cEoTgKuPIZ3EnX
Cc: "jose@ietf.org" <jose@ietf.org>, "Matt Miller (mamille2)" <mamille2@cisco.com>
Subject: Re: [jose] Adding a X509/PKIX JWK type? [WAS: issues with x5c in JWE]
X-BeenThere: jose@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Javascript Object Signing and Encryption <jose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jose>, <mailto:jose-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/jose>
List-Post: <mailto:jose@ietf.org>
List-Help: <mailto:jose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jose>, <mailto:jose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 08 Feb 2013 22:46:19 -0000
But just a non-objection from Peter Saint-Andre is very valuable in its own right ;) On Fri, Feb 8, 2013 at 1:15 PM, Peter Saint-Andre <stpeter@stpeter.im>wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 2/8/13 11:47 AM, Matt Miller (mamille2) wrote: > > After some off-list discussions, a couple of us believe it would > > be worthwhile to somehow wrap a PKIX certificate chain in a JSON > > Web Key. A couple of us are leaning toward a new JWK type to do > > this. One impact, I think, is that anywhere we currently have "x5c" > > (and potentially "x5t" and "x5u") are effectively replaced by an > > actual JWK object. However, a few of us have other use cases where > > a PKIX certificate JWK would solve some problems. > > > > Unless there's strong objection, Brian Campbell and I are likely > > to start work on a new I-D that documents our musings. > > Sounds like a good idea. > > Not that you need anyone's permission to work on a non-WG > Internet-Draft. :-) > > Peter > > - -- > Peter Saint-Andre > https://stpeter.im/ > > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG/MacGPG2 v2.0.18 (Darwin) > Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ > > iQIcBAEBAgAGBQJRFVzzAAoJEOoGpJErxa2p4CkP/AyqSYm8ryd9kjq11AsPxdjn > 4IYynE02urlTcq7gr+4dX7nS7BcggPX77BxqOD+/4FDDaqnXjeCHFZa4UO1PCdfC > 6WOaDSy20lz7sanVcaKy3Rlng70xVJXzqmp3AvcuYTeLniZr9NzJvlFDv96XxCV6 > fl8UOWHDr8VEOHtcjaHaQdU7rwm8aszZzFp2oOtgnAvqC5TWfIVZHnz4YpTisieU > 38ZOafXO+OH31dpa5xIkVC7bmWk3xNew+h7WHnoHfFdloS3/SFlqSoZVrQQ3V/Ed > u4DzxPRHG0skbAN119IlKO6/nkYqtAIiRZ8Exq6SAc6NgBq4+D9g2BQ8yBKHttLW > Vku/Wb6pc9WWO2GQ0Zjy7SsJC3BdxdozagyTsv8EOc85sZ5ZMC34gwYDHPyoG80S > V/23qNQhjfKzuEsxjhVZ3q+XKZ+vjL79sMSpSwAKZ7trMdu/d7eH+KKM3jAoEbH8 > ejb2JkFeKmprkDCbBMqXeygWyVHLHO5RQFV0Zudn+rvkQZvM5agE+U7RouN+Gvw6 > 6QuCEfE7SRiAkigPdqU+mPR45HuhaF8V6EZ8lyrqULHhFiYnUb/6rFOIHt6O2OdN > OGSmt6kLqH9JiaUG6erGC0KAhQP9obeEPlp5cKMZDlfYgkzbxVylVA1SKCmIC2IN > caqrzbQrFupevrJC9qP8 > =3bg2 > -----END PGP SIGNATURE----- >
- [jose] issues with x5c in JWE Brian Campbell
- Re: [jose] issues with x5c in JWE John Bradley
- Re: [jose] issues with x5c in JWE Brian Campbell
- Re: [jose] issues with x5c in JWE Matt Miller (mamille2)
- Re: [jose] issues with x5c in JWE Mike Jones
- Re: [jose] issues with x5c in JWE John Bradley
- Re: [jose] issues with x5c in JWE Brian Campbell
- Re: [jose] issues with x5c in JWE Matt Miller (mamille2)
- [jose] Adding a X509/PKIX JWK type? [WAS: issues … Matt Miller (mamille2)
- Re: [jose] Adding a X509/PKIX JWK type? [WAS: iss… John Bradley
- Re: [jose] Adding a X509/PKIX JWK type? [WAS: iss… Brian Campbell
- Re: [jose] Adding a X509/PKIX JWK type? [WAS: iss… Salvatore D'Agostino
- Re: [jose] Adding a X509/PKIX JWK type? [WAS: iss… Peter Saint-Andre
- Re: [jose] Adding a X509/PKIX JWK type? [WAS: iss… Brian Campbell
- Re: [jose] Adding a X509/PKIX JWK type? [WAS: iss… Richard Barnes
- Re: [jose] Adding a X509/PKIX JWK type? [WAS: iss… John Bradley
- Re: [jose] Adding a X509/PKIX JWK type? [WAS: iss… Richard Barnes
- Re: [jose] Adding a X509/PKIX JWK type? [WAS: iss… Matt Miller (mamille2)
- Re: [jose] Adding a X509/PKIX JWK type? [WAS: iss… Brian Campbell