Re: [jose] I-D Action: draft-ietf-jose-use-cases-05.txt

Sean Turner <turners@ieca.com> Fri, 13 September 2013 02:14 UTC

Return-Path: <turners@ieca.com>
X-Original-To: jose@ietfa.amsl.com
Delivered-To: jose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 92A7C11E80D5 for <jose@ietfa.amsl.com>; Thu, 12 Sep 2013 19:14:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.329
X-Spam-Level:
X-Spam-Status: No, score=-102.329 tagged_above=-999 required=5 tests=[AWL=-0.064, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jvO6T-mPD2zd for <jose@ietfa.amsl.com>; Thu, 12 Sep 2013 19:14:01 -0700 (PDT)
Received: from gateway13.websitewelcome.com (gateway13.websitewelcome.com [69.56.150.12]) by ietfa.amsl.com (Postfix) with ESMTP id 5D42011E8131 for <jose@ietf.org>; Thu, 12 Sep 2013 19:14:01 -0700 (PDT)
Received: by gateway13.websitewelcome.com (Postfix, from userid 5007) id 863C339A5E30F; Thu, 12 Sep 2013 21:13:40 -0500 (CDT)
Received: from gator3286.hostgator.com (gator3286.hostgator.com [198.57.247.250]) by gateway13.websitewelcome.com (Postfix) with ESMTP id 54D4139A5E292 for <jose@ietf.org>; Thu, 12 Sep 2013 21:13:40 -0500 (CDT)
Received: from [96.231.225.44] (port=64350 helo=thunderfish.local) by gator3286.hostgator.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.80) (envelope-from <turners@ieca.com>) id 1VKItT-0001Sp-Qm; Thu, 12 Sep 2013 21:13:59 -0500
Message-ID: <523274E7.9040702@ieca.com>
Date: Thu, 12 Sep 2013 22:13:59 -0400
From: Sean Turner <turners@ieca.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:17.0) Gecko/20130801 Thunderbird/17.0.8
MIME-Version: 1.0
To: Jim Schaad <ietf@augustcellars.com>
References: <20130905154742.11450.63345.idtracker@ietfa.amsl.com> <5232594E.4040709@ieca.com> <000301ceb01d$39a26fd0$ace74f70$@augustcellars.com>
In-Reply-To: <000301ceb01d$39a26fd0$ace74f70$@augustcellars.com>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - gator3286.hostgator.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ieca.com
X-BWhitelist: no
X-Source:
X-Source-Args:
X-Source-Dir:
X-Source-Sender: (thunderfish.local) [96.231.225.44]:64350
X-Source-Auth: sean.turner@ieca.com
X-Email-Count: 1
X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IzMjg2Lmhvc3RnYXRvci5jb20=
Cc: jose@ietf.org
Subject: Re: [jose] I-D Action: draft-ietf-jose-use-cases-05.txt
X-BeenThere: jose@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Javascript Object Signing and Encryption <jose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jose>, <mailto:jose-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/jose>
List-Post: <mailto:jose@ietf.org>
List-Help: <mailto:jose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jose>, <mailto:jose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Sep 2013 02:14:07 -0000

On 9/12/13 9:04 PM, Jim Schaad wrote:
>
>
>> -----Original Message-----
>> From: jose-bounces@ietf.org [mailto:jose-bounces@ietf.org] On Behalf Of
>> Sean Turner
>> Sent: Thursday, September 12, 2013 5:16 PM
>> To: jose@ietf.org
>> Subject: Re: [jose] I-D Action: draft-ietf-jose-use-cases-05.txt
>>
>> I'm just nitting for now:
>>
>> 1) s2
>>
>> OLD:
>>
>> The JOSE working group charter calls for the group to define three basic
> JSON
>> object formats:
>>
>> NEW:
>>
>> Three basic JSON object formats are initially defined, with more possibly
>> defined later:
>>
>> 2) s2
>>
>> OLD:
>>
>> The JOSE working group items intended to describe these formats are JSON
>> Web Signature (JWS), JSON Web Encryption (JWE), and JSON Web Key
>> (JWK), respectively [I-D.ietf-jose-json-web-signature]
>> [I-D.ietf-jose-json-web-encryption] [I-D.ietf-jose-json-web-key].
>>
>> NEW:
>>
>> The JSON Web Signature (JWS), JSON Web Encryption (JWE), and JSON Web
>> Key (JWK) specifications, respectively [I-D.ietf-jose-json-web-signature]
> [I-
>> D.ietf-jose-json-web-encryption]
>> [I-D.ietf-jose-json-web-key], define these formats.
>>
>> 3) s3: Not sure the following is entirely correct for DH-based algs:
>>
>>    o  The JOSE encrypted object format must support object encryption in
>>       the case where the sender has only a public key for the receiver.
>>
>> Shouldn't this also include the case where the sender has their own public
>> key and the receiver's public key.
>
> Not really - we are doing ephemeral DH so the key sender key is created on
> the fly.

Ah I should have re-read the alg draft too.

spt