Re: [jose] #81: Section 5. String Comparison Rules

"Jim Schaad" <ietf@augustcellars.com> Thu, 22 August 2013 00:19 UTC

Return-Path: <ietf@augustcellars.com>
X-Original-To: jose@ietfa.amsl.com
Delivered-To: jose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 35D4F21F9AB8 for <jose@ietfa.amsl.com>; Wed, 21 Aug 2013 17:19:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.449
X-Spam-Level:
X-Spam-Status: No, score=-3.449 tagged_above=-999 required=5 tests=[AWL=0.150, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9CT6hkbNZyS5 for <jose@ietfa.amsl.com>; Wed, 21 Aug 2013 17:19:38 -0700 (PDT)
Received: from smtp1.pacifier.net (smtp1.pacifier.net [64.255.237.171]) by ietfa.amsl.com (Postfix) with ESMTP id B927221F9AA9 for <jose@ietf.org>; Wed, 21 Aug 2013 17:19:38 -0700 (PDT)
Received: from Philemon (mail.augustcellars.com [50.34.17.238]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp1.pacifier.net (Postfix) with ESMTPSA id 4816F2CA16; Wed, 21 Aug 2013 17:19:38 -0700 (PDT)
From: Jim Schaad <ietf@augustcellars.com>
To: michael.jones@microsoft.com
References: <061.9b303efdf57410b3447cd4bce05143ca@trac.tools.ietf.org> <076.2687bda9316451862ccfbe7f0eaefd06@trac.tools.ietf.org>
In-Reply-To: <076.2687bda9316451862ccfbe7f0eaefd06@trac.tools.ietf.org>
Date: Wed, 21 Aug 2013 17:18:31 -0700
Message-ID: <008f01ce9ecd$22a201d0$67e60570$@augustcellars.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AQEopFIVcCQiOxF5OgALUGdEVs4YOgIetwIqmttbuBA=
Content-Language: en-us
Cc: jose@ietf.org
Subject: Re: [jose] #81: Section 5. String Comparison Rules
X-BeenThere: jose@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Javascript Object Signing and Encryption <jose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jose>, <mailto:jose-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/jose>
List-Post: <mailto:jose@ietf.org>
List-Help: <mailto:jose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jose>, <mailto:jose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 22 Aug 2013 00:19:53 -0000

I cannot find the final resolution on the JSON list, but this was the list
of options that were given

**********

There are four proposals for establishing name equality:

0) Leave the current draft as-is, not discussing name equality

1) In Section 2.5 ("Strings"), immediately before the ABNF add:
   For purpose of establishing name equality, comparisons MUST be conducted,
after all unescaping
   is done, by comparing numeric character code points. There is to be no
modification of any
   kind to the characters in names, including case-changing or
combining-form normalization.
   For example, the following four names MUST be considered equivalent:
    * "\u002F"
    * "\u002f"
    * "\/"
    * "/"

2) In Section 2.5 ("Strings"), immediately before the ABNF add:
   For purpose of establishing name equality, comparisons MUST be conducted,
after all unescaping
   is done, by comparing numeric character code points. There MUST NOT be
any modification of any
   kind to the characters in names, including change of case or change
between precomposed and
   decomposed forms.
   For example, the following four names MUST be considered equivalent:
    * "\u002F"
    * "\u002f"
    * "\/"
    * "/"

3) In Section 2.5 ("Strings"), immediately before the ABNF add:
   For purpose of establishing name equality, implementations MUST first do
all unescaping and
   then MUST compare numeric character code points. There is to be no
modification of any kind to
   the characters in names, including case-changing or combining-form
normalization.
   For example, the following four names MUST be considered equivalent:
    * "\u002F"
    * "\u002f"
    * "\/"
    * "/"

Please respond to this message with a list of proposals you could accept,
ordered from highest to lowest. Do not list proposals you cannot live with.
If you cannot accept any of the proposals, please respond and say why.

Based on the responses we receive, we will try to judge the consensus of the
WG.

-- The JSON WG co-chairs

> -----Original Message-----
> From: jose-bounces@ietf.org [mailto:jose-bounces@ietf.org] On Behalf Of
> jose issue tracker
> Sent: Wednesday, August 21, 2013 3:13 PM
> To: draft-ietf-jose-json-web-key@tools.ietf.org;
> michael.jones@microsoft.com
> Cc: jose@ietf.org
> Subject: Re: [jose] #81: Section 5. String Comparison Rules
> 
> #81: Section 5. String Comparison Rules
> 
> 
> Comment (by michael.jones@microsoft.com):
> 
>  What is the updated JSON string comparison language that should be used?
> 
> --
>
-------------------------+-------------------------------------------------
>  Reporter:               |       Owner:  draft-ietf-jose-json-web-
>   ietf@augustcellars.com |  key@tools.ietf.org
>      Type:  defect       |      Status:  new
>  Priority:  major        |   Milestone:
> Component:  json-web-    |     Version:
>   key                    |  Resolution:
>  Severity:  -            |
>  Keywords:               |
>
-------------------------+-------------------------------------------------
> 
> Ticket URL: <http://trac.tools.ietf.org/wg/jose/trac/ticket/81#comment:1>
> jose <http://tools.ietf.org/jose/>
> 
> _______________________________________________
> jose mailing list
> jose@ietf.org
> https://www.ietf.org/mailman/listinfo/jose