Re: [jose] #50: "cty" (content type) should hold a media type

Mike Jones <Michael.Jones@microsoft.com> Mon, 16 September 2013 21:34 UTC

Return-Path: <Michael.Jones@microsoft.com>
X-Original-To: jose@ietfa.amsl.com
Delivered-To: jose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8752A11E81CF for <jose@ietfa.amsl.com>; Mon, 16 Sep 2013 14:34:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.598
X-Spam-Level:
X-Spam-Status: No, score=-3.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TZ5g9EUM9HTN for <jose@ietfa.amsl.com>; Mon, 16 Sep 2013 14:33:57 -0700 (PDT)
Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1lp0152.outbound.protection.outlook.com [207.46.163.152]) by ietfa.amsl.com (Postfix) with ESMTP id 8317511E8112 for <jose@ietf.org>; Mon, 16 Sep 2013 14:33:57 -0700 (PDT)
Received: from DM2PR03CA001.namprd03.prod.outlook.com (10.141.52.149) by BN1PR03MB267.namprd03.prod.outlook.com (10.255.200.17) with Microsoft SMTP Server (TLS) id 15.0.775.9; Mon, 16 Sep 2013 21:33:54 +0000
Received: from BL2FFO11FD008.protection.gbl (2a01:111:f400:7c09::167) by DM2PR03CA001.outlook.office365.com (2a01:111:e400:2414::21) with Microsoft SMTP Server (TLS) id 15.0.775.9 via Frontend Transport; Mon, 16 Sep 2013 21:33:54 +0000
Received: from mail.microsoft.com (131.107.125.37) by BL2FFO11FD008.mail.protection.outlook.com (10.173.161.4) with Microsoft SMTP Server (TLS) id 15.0.775.5 via Frontend Transport; Mon, 16 Sep 2013 21:33:54 +0000
Received: from TK5EX14MBXC289.redmond.corp.microsoft.com ([169.254.3.240]) by TK5EX14HUBC103.redmond.corp.microsoft.com ([157.54.86.9]) with mapi id 14.03.0136.001; Mon, 16 Sep 2013 21:32:52 +0000
From: Mike Jones <Michael.Jones@microsoft.com>
To: Edmund Jay <ejay@mgi1.com>, John Bradley <ve7jtb@ve7jtb.com>, "Axel.Nennker@telekom.de" <Axel.Nennker@telekom.de>
Thread-Topic: [jose] #50: "cty" (content type) should hold a media type
Thread-Index: AQHOsKzFCJ3RhW06KUOGZNFDkY4DepnI2P8AgAACmICAAAYAAIAABJgA
Date: Mon, 16 Sep 2013 21:32:50 +0000
Message-ID: <4E1F6AAD24975D4BA5B168042967394371FD61B8@TK5EX14MBXC289.redmond.corp.microsoft.com>
References: <058.0d74b4153b360c16ccd3d64acacfc6f3@trac.tools.ietf.org> <073.b3ecbc54a761c68cd123ac96652e0240@trac.tools.ietf.org> <CE8995AB5D178F44A2154F5C9A97CAF402581D803FB4@HE111541.emea1.cds.t-internal.com> <86DCD696-1420-426E-8C05-6C23D19083AD@ve7jtb.com> <1379365958.81874.YahooMailNeo@web184405.mail.bf1.yahoo.com>
In-Reply-To: <1379365958.81874.YahooMailNeo@web184405.mail.bf1.yahoo.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [157.54.51.37]
Content-Type: multipart/alternative; boundary="_000_4E1F6AAD24975D4BA5B168042967394371FD61B8TK5EX14MBXC289r_"
MIME-Version: 1.0
X-Forefront-Antispam-Report: CIP:131.107.125.37; CTRY:US; IPV:CAL; IPV:NLI; EFV:NLI; SFV:NSPM; SFS:(51704005)(189002)(377454003)(199002)(24454002)(69234005)(13464003)(377424004)(16236675002)(512954002)(81542001)(81342001)(15202345003)(83322001)(19580395003)(19580405001)(6806004)(83072001)(71186001)(47736001)(4396001)(49866001)(74706001)(74876001)(47976001)(74366001)(50986001)(44976005)(80022001)(76786001)(76482001)(54316002)(15975445006)(76796001)(56776001)(84326001)(81686001)(79102001)(20776003)(81816001)(65816001)(59766001)(63696002)(69226001)(66066001)(51856001)(74502001)(74662001)(47446002)(46102001)(56816003)(80976001)(54356001)(77982001)(31966008)(77096001)(19300405004)(55846006)(53806001)(33656001)(6606295002); DIR:OUT; SFP:; SCL:1; SRVR:BN1PR03MB267; H:mail.microsoft.com; CLIP:131.107.125.37; FPR:; RD:InfoDomainNonexistent; MX:1; A:1; LANG:en;
X-O365ENT-EOP-Header: Message processed by - O365_ENT: Allow from ranges (Engineering ONLY)
X-Forefront-PRVS: 0971922F40
X-OriginatorOrg: DuplicateDomain-a84fc36a-4ed7-4e57-ab1c-3e967bcbad48.microsoft.com
Cc: "trac+jose@trac.tools.ietf.org" <trac+jose@trac.tools.ietf.org>, "jose@ietf.org" <jose@ietf.org>, "draft-ietf-jose-json-web-signature@tools.ietf.org" <draft-ietf-jose-json-web-signature@tools.ietf.org>
Subject: Re: [jose] #50: "cty" (content type) should hold a media type
X-BeenThere: jose@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Javascript Object Signing and Encryption <jose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jose>, <mailto:jose-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/jose>
List-Post: <mailto:jose@ietf.org>
List-Help: <mailto:jose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jose>, <mailto:jose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 16 Sep 2013 21:34:02 -0000

FYI, I did add the following text on case sensitivity and the use of MIME types in -16:

When MIME Media Type values are used, it is RECOMMENDED that they be spelled using the exact character case used in the MIME Media Types registry [IANA.MediaTypes]<http://self-issued.info/docs/draft-ietf-jose-json-web-signature-16.html#IANA.MediaTypes>, since this field is case sensitive, whereas MIME Media Type values are case insensitive.

This is close to John's recommendation that we use lowercase media type names, since most registrations at http://www.iana.org/assignments/media-types use exclusively lowercase.  At least the spelling in the registry is well defined and authoritative.

                                                            -- Mike

From: Edmund Jay [mailto:ejay@mgi1.com]
Sent: Monday, September 16, 2013 2:13 PM
To: John Bradley; Axel.Nennker@telekom.de
Cc: Mike Jones; trac+jose@trac.tools.ietf.org; jose@ietf.org; draft-ietf-jose-json-web-signature@tools.ietf.org
Subject: Re: [jose] #50: "cty" (content type) should hold a media type

+ 1 for keeping the compact form since it gives a choice where compactness is needed and does not preclude using media types.



________________________________
From: John Bradley <ve7jtb@ve7jtb.com<mailto:ve7jtb@ve7jtb.com>>
To: Axel.Nennker@telekom.de<mailto:Axel.Nennker@telekom.de>
Cc: michael.jones@microsoft.com<mailto:michael.jones@microsoft.com>; trac+jose@trac.tools.ietf.org<mailto:trac+jose@trac.tools.ietf.org>; jose@ietf.org<mailto:jose@ietf.org>; draft-ietf-jose-json-web-signature@tools.ietf.org<mailto:draft-ietf-jose-json-web-signature@tools.ietf.org>
Sent: Monday, September 16, 2013 1:51 PM
Subject: Re: [jose] #50: "cty" (content type) should hold a media type

I think mime types should be compared as octets rater than introduce folding rules.  So it would be good to say that when they are used they MUST be lowercase as is the convention.

I think keeping the current short names is fine, and not likely to cause confusion.

John B.
On 2013-09-16, at 1:41 PM, <Axel.Nennker@telekom.de<mailto:Axel.Nennker@telekom.de>> wrote:

> +1 for keeping the compact form for cty
>
> I would even stay with case sensivity for mime-types because in (all?) other cases in JOSE we are comparing octets as-is to avoid complexity.
> [Canonicalization is evil]
>
> -axel
>
> -----Original Message-----
> From: jose-bounces@ietf.org<mailto:jose-bounces@ietf.org> [mailto:jose-bounces@ietf.org<mailto:jose-bounces@ietf.org>] On Behalf Of jose issue tracker
> Sent: Friday, September 13, 2013 8:12 PM
> To: draft-ietf-jose-json-web-signature@tools.ietf.org<mailto:draft-ietf-jose-json-web-signature@tools.ietf.org>; michael.jones@microsoft.com<mailto:michael.jones@microsoft.com>
> Cc: jose@ietf.org<mailto:jose@ietf.org>
> Subject: Re: [jose] #50: "cty" (content type) should hold a media type
>
> #50: "cty" (content type) should hold a media type
>
>
> Comment (by michael.jones@microsoft.com<mailto:michael.jones@microsoft.com>):
>
> Originally "typ" and "cty" values were in their own IANA type space that  was independent of MIME types.  Quite some time ago (I believe based on  comments from Jim), the working group decided to add a field in the types  registry allowing the correspondence between the short-by-design JOSE type  names and MIME types to be registered.  At the time, we also decided to  allow the use of MIME types in those fields, which is fine in cases where  compactness isn't a goal.
>
> However, for many cases, compactness is a goal, and the current solution  is designed with that in mind, and is already working fine.  I don't see a  compelling reason to change it at this point.  It's already used, for  instance, in Section 6 of JWK, for indicating that a JWK or JWK Set are  the encrypted content.  It's used by JWT for saying that a JWT is the  encrypted content.  Etc.
>
> To address your concerns about the "MAY be used" language, I propose that  "MAY be used" be changed to "is used".  You're right that the "OPTIONAL"
> phrase already covers the "MAY" intent.
>
> To address your concerns about MIME types being case insensitive, I  propose that we add this text after saying that MIME types values may be
> used: "When MIME Media Types values are used, it is RECOMMENDED that they  use the exact character case used in the registry, since this field is  case sensitive, whereas MIME values are case insensitive."
>
> --
> -------------------------+----------------------------------------------
> -------------------------+---
> Reporter:              |      Owner:  draft-ietf-jose-json-web-
>  james@manger.com.au<mailto:james@manger.com.au>    |  signature@tools.ietf.org<mailto:signature@tools.ietf.org>
>    Type:  defect      |      Status:  new
> Priority:  major        |  Milestone:
> Component:  json-web-    |    Version:
>  signature              |  Resolution:
> Severity:  -            |
> Keywords:              |
> -------------------------+----------------------------------------------
> -------------------------+---
>
> Ticket URL: <http://trac.tools.ietf.org/wg/jose/trac/ticket/50#comment:1>
> jose <http://tools.ietf.org/jose/>
>
> _______________________________________________
> jose mailing list
> jose@ietf.org<mailto:jose@ietf.org>
> https://www.ietf.org/mailman/listinfo/jose
> _______________________________________________
> jose mailing list
> jose@ietf.org<mailto:jose@ietf.org>
> https://www.ietf.org/mailman/listinfo/jose


_______________________________________________
jose mailing list
jose@ietf.org<mailto:jose@ietf.org>
https://www.ietf.org/mailman/listinfo/jose