Re: [jose] Feedback request on jose tracker issue #12: Should the x5c field be removed from JWE?, ,

Matias Woloski <matiasw@gmail.com> Mon, 15 April 2013 17:08 UTC

Return-Path: <matiasw@gmail.com>
X-Original-To: jose@ietfa.amsl.com
Delivered-To: jose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 99C5121F9381 for <jose@ietfa.amsl.com>; Mon, 15 Apr 2013 10:08:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wXOeFixgDpJi for <jose@ietfa.amsl.com>; Mon, 15 Apr 2013 10:08:00 -0700 (PDT)
Received: from mail-ea0-x22d.google.com (mail-ea0-x22d.google.com [IPv6:2a00:1450:4013:c01::22d]) by ietfa.amsl.com (Postfix) with ESMTP id D8B6A21F937E for <jose@ietf.org>; Mon, 15 Apr 2013 10:07:54 -0700 (PDT)
Received: by mail-ea0-f173.google.com with SMTP id k11so2272186eaj.18 for <jose@ietf.org>; Mon, 15 Apr 2013 10:07:48 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:mime-version:in-reply-to:references:from:date:message-id :subject:to:cc:content-type; bh=IRiKf3VefsArkZ6BRLQJKZRJ06T5CFKzvZr2S9GiYcI=; b=oNhtr9LXFN/YMgbKZj4XCi7Q60k4AiyV6jyHQcutVbuCeXGWLiQB25iTGYC6gpuLqX K5bxmbuby67MBOIQyc6eO2Ty9QCILrzW4E++JFyzzQUvajBJPWv4zwcJOnAZl4RcCbLD KSFzXxng8DmAmV1xYGHVpc9XE6WhNr+rolBpD7IFCyWcPWM6HQNNvzuMQF8AvOe5Xcuw qYO/MXuhkZMFBbXEQrtSiiBb6rKyAbZ5xThKrPIp2RmXOgCv/VFx4lxBqGDpSGMtmGqH jcbv/QfLQ8xk2ob25hnUSToytdz+AYCxBGXjY6aTfg0OhuFOExnfPCWEaI1Ja9mY0JMG OnCg==
X-Received: by 10.15.27.195 with SMTP id p43mr63859014eeu.8.1366045668514; Mon, 15 Apr 2013 10:07:48 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.15.33.198 with HTTP; Mon, 15 Apr 2013 10:07:28 -0700 (PDT)
In-Reply-To: <3d7aa65fdb52440c8d4ec87dbd2bc1d7@BY2PR03MB041.namprd03.prod.outlook.com>
References: <51674E58.6000505@isoc.org> <CE8995AB5D178F44A2154F5C9A97CAF402553CF16251@HE111541.emea1.cds.t-internal.com> <4E289D7B-BB53-412A-AE3F-8CD08E45205A@adm.umu.se> <4E1F6AAD24975D4BA5B168042967394367641257@TK5EX14MBXC283.redmond.corp.microsoft.com> <3d7aa65fdb52440c8d4ec87dbd2bc1d7@BY2PR03MB041.namprd03.prod.outlook.com>
From: Matias Woloski <matiasw@gmail.com>
Date: Mon, 15 Apr 2013 14:07:28 -0300
Message-ID: <CAK+KdNUmREwmXcMZrgJjuZa4WdqVbVdNOqbc8mnDv1dwASCjnw@mail.gmail.com>
To: Anthony Nadalin <tonynad@microsoft.com>
Content-Type: multipart/alternative; boundary="089e0163450ad1ce2004da694afa"
Cc: Mike Jones <Michael.Jones@microsoft.com>, "jose@ietf.org" <jose@ietf.org>, "odonoghue@isoc.org" <odonoghue@isoc.org>
Subject: Re: [jose] Feedback request on jose tracker issue #12: Should the x5c field be removed from JWE?, ,
X-BeenThere: jose@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Javascript Object Signing and Encryption <jose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jose>, <mailto:jose-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/jose>
List-Post: <mailto:jose@ietf.org>
List-Help: <mailto:jose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jose>, <mailto:jose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Apr 2013 17:08:01 -0000

1.

In some cases, it is simpler for me to just put the whole base64 public
key. For instance, in some platforms is not straightforward to parse an
X509 cert and extract the serial number, hence being able to send the
public key blob there, makes it easier for interop.


On Mon, Apr 15, 2013 at 1:44 PM, Anthony Nadalin <tonynad@microsoft.com>wrote:

> 1
>
> -----Original Message-----
> From: jose-bounces@ietf.org [mailto:jose-bounces@ietf.org] On Behalf Of
> Mike Jones
> Sent: Monday, April 15, 2013 8:23 AM
> To: odonoghue@isoc.org
> Cc: jose@ietf.org
> Subject: Re: [jose] Feedback request on jose tracker issue #12: Should the
> x5c field be removed from JWE?, ,
>
> 1.  Retain the "x5c" header parameter in JWE.
>
> -----Original Message-----
> From: jose-bounces@ietf.org [mailto:jose-bounces@ietf.org] On Behalf Of
> Roland Hedberg
> Sent: Saturday, April 13, 2013 12:22 PM
> To: Axel.Nennker@telekom.de
> Cc: jose@ietf.org; odonoghue@isoc.org
> Subject: Re: [jose] Feedback request on jose tracker issue #12: Should the
> x5c field be removed from JWE?, ,
>
> +1
>
> 12 apr 2013 kl. 08:32 skrev Axel.Nennker@telekom.de:
>
> 1
>
> x5c is the most explicit way to describe which private key is the right
> one. It is an alternative to kid which is another reason why  kid must not
> be mandatory.
>
> From: jose-bounces@ietf.org [mailto:jose-bounces@ietf.org] On Behalf Of
> Karen O'Donoghue
> Sent: Friday, April 12, 2013 1:59 AM
> To: jose@ietf.org
> Subject: [jose] Feedback request on jose tracker issue #12: Should the x5c
> field be removed from JWE?, ,
>
> Issue #12 http://trac.tools.ietf.org/wg/jose/trac/ticket/12 suggests
> removing the "x5c" header parameter from JWE, saying that no use case for
> it has emerged.  The same logic may apply to other key specification
> parameters for JWE.
>
>
> Which of these best describes your preferences on this issue?
> 1.  Retain the "x5c" header parameter in JWE.
> 2.  Remove the "x5c" header parameter (and possibly other related key
> specification parameters) from JWE.
> 3.  Another resolution (please specify in detail).
> 0.  I need more information to decide.
>
> Your reply is requested by Friday, April 19th or earlier.
> _______________________________________________
> jose mailing list
> jose@ietf.org
> https://www.ietf.org/mailman/listinfo/jose
>
> _______________________________________________
> jose mailing list
> jose@ietf.org
> https://www.ietf.org/mailman/listinfo/jose
> _______________________________________________
> jose mailing list
> jose@ietf.org
> https://www.ietf.org/mailman/listinfo/jose
>
>
>
> _______________________________________________
> jose mailing list
> jose@ietf.org
> https://www.ietf.org/mailman/listinfo/jose
>