Re: [jose] Should we delete the "typ" header field

Dick Hardt <dick.hardt@gmail.com> Wed, 29 May 2013 22:49 UTC

Return-Path: <dick.hardt@gmail.com>
X-Original-To: jose@ietfa.amsl.com
Delivered-To: jose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA58721F96B9 for <jose@ietfa.amsl.com>; Wed, 29 May 2013 15:49:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.227
X-Spam-Level:
X-Spam-Status: No, score=-2.227 tagged_above=-999 required=5 tests=[AWL=0.372, BAYES_00=-2.599, HTML_MESSAGE=0.001, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id evD5ItuBeqKS for <jose@ietfa.amsl.com>; Wed, 29 May 2013 15:49:17 -0700 (PDT)
Received: from mail-ve0-x22a.google.com (mail-ve0-x22a.google.com [IPv6:2607:f8b0:400c:c01::22a]) by ietfa.amsl.com (Postfix) with ESMTP id 76C4821F96A3 for <jose@ietf.org>; Wed, 29 May 2013 15:49:17 -0700 (PDT)
Received: by mail-ve0-f170.google.com with SMTP id 14so624112vea.1 for <jose@ietf.org>; Wed, 29 May 2013 15:49:16 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=XTj3rWObUi1bQ+IG1Hcvg7xyFgpfs5cHx1l/CJvHBvw=; b=nB7k//fR4XJLQ+bQJ1wXDN8QnNPj5K45EunFvJp25cPl9S+00NvI4f/EwxnFjwa2IW T/Ik+mqZUNsFXBIajtdZHPsi+RcdZBSIBaVa5QyCvmU+gNyvsIdnLmMlhPzaae3R14sr V2MicUqWjzit8JmVwgkL3YbA96si6U5xe31UBbXsqjE15cF1cRw2tGi3EUxFtXX9b8oh GD1m5xiU+0KJXYpIq5j3hz3l2hxoO83wGm9bEpMCBXX91OXKln96MdIYqENf9et4vvoE nL3sWYFChfUG0d2t8rTyyA2EkHUMmJdcv1cZmsj83vG5AtvCSvwb5SuJwzkI+PFbx/2d PgDw==
MIME-Version: 1.0
X-Received: by 10.58.187.164 with SMTP id ft4mr3056844vec.5.1369867756894; Wed, 29 May 2013 15:49:16 -0700 (PDT)
Received: by 10.52.160.161 with HTTP; Wed, 29 May 2013 15:49:16 -0700 (PDT)
In-Reply-To: <02b701ce5cb8$46ae77e0$d40b67a0$@augustcellars.com>
References: <02b701ce5cb8$46ae77e0$d40b67a0$@augustcellars.com>
Date: Wed, 29 May 2013 15:49:16 -0700
Message-ID: <CAD9ie-vK3gY9b9GQrbUa=TACy5KVA1uPH_u_utucoKzVynjuiA@mail.gmail.com>
From: Dick Hardt <dick.hardt@gmail.com>
To: Jim Schaad <ietf@augustcellars.com>
Content-Type: multipart/alternative; boundary="047d7b5d5d520a039404dde331c5"
Cc: "jose@ietf.org" <jose@ietf.org>
Subject: Re: [jose] Should we delete the "typ" header field
X-BeenThere: jose@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Javascript Object Signing and Encryption <jose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jose>, <mailto:jose-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/jose>
List-Post: <mailto:jose@ietf.org>
List-Help: <mailto:jose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jose>, <mailto:jose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 29 May 2013 22:49:18 -0000

Well, I have been using, but now realize the spec changed or I was confused.

I had been setting "typ" to be either "JWE" or "JWS" depending on the type
of token I was creating or parsing as it was easier than looking at "alg"

As currently defined, I don't see value in "typ".

-- Dick



On Wed, May 29, 2013 at 3:02 PM, Jim Schaad <ietf@augustcellars.com> wrote:

> In reading the documents, I am trying to understand the justification for
> having the “typ” header parameter in the JOSE documents.****
>
> ** **
>
> The purpose of the field is to hold the type of the object.  In the past,
> I believe that values which should now be placed in the cty field (such as
> “JWT”) were placed in this field as well.  However the parameter is
> optional and an implementation cannot rely on its being present.  This
> means that for all practical purposes all of the code to determine the
> value of the type field from the values of the alg and enc fields.  If the
> field was mandatory then this code would disappear at a fairly small space
> cost and I can understand why the parameter would be present.****
>
> ** **
>
> Can anybody justify why this field should be present in the document – or
> should it just disappear?****
>
> ** **
>
> Jim****
>
> ** **
>
> _______________________________________________
> jose mailing list
> jose@ietf.org
> https://www.ietf.org/mailman/listinfo/jose
>
>


-- 
-- Dick