Re: [jose] I-D Action: draft-ietf-jose-use-cases-05.txt

Sean Turner <turners@ieca.com> Fri, 13 September 2013 00:16 UTC

Return-Path: <turners@ieca.com>
X-Original-To: jose@ietfa.amsl.com
Delivered-To: jose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BAFC021E821C for <jose@ietfa.amsl.com>; Thu, 12 Sep 2013 17:16:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.335
X-Spam-Level:
X-Spam-Status: No, score=-102.335 tagged_above=-999 required=5 tests=[AWL=-0.070, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qTDPbT5rg-ev for <jose@ietfa.amsl.com>; Thu, 12 Sep 2013 17:16:34 -0700 (PDT)
Received: from gateway07.websitewelcome.com (gateway07.websitewelcome.com [69.56.159.26]) by ietfa.amsl.com (Postfix) with ESMTP id 2141E21E80ED for <jose@ietf.org>; Thu, 12 Sep 2013 17:16:33 -0700 (PDT)
Received: by gateway07.websitewelcome.com (Postfix, from userid 5007) id 601EB59A31FAA; Thu, 12 Sep 2013 19:16:05 -0500 (CDT)
Received: from gator3286.hostgator.com (gator3286.hostgator.com [198.57.247.250]) by gateway07.websitewelcome.com (Postfix) with ESMTP id 4A3EF59A31F63 for <jose@ietf.org>; Thu, 12 Sep 2013 19:16:05 -0500 (CDT)
Received: from [96.231.225.44] (port=63147 helo=thunderfish.local) by gator3286.hostgator.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.80) (envelope-from <turners@ieca.com>) id 1VKH3X-0007Ut-An for jose@ietf.org; Thu, 12 Sep 2013 19:16:15 -0500
Message-ID: <5232594E.4040709@ieca.com>
Date: Thu, 12 Sep 2013 20:16:14 -0400
From: Sean Turner <turners@ieca.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:17.0) Gecko/20130801 Thunderbird/17.0.8
MIME-Version: 1.0
To: jose@ietf.org
References: <20130905154742.11450.63345.idtracker@ietfa.amsl.com>
In-Reply-To: <20130905154742.11450.63345.idtracker@ietfa.amsl.com>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - gator3286.hostgator.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ieca.com
X-BWhitelist: no
X-Source:
X-Source-Args:
X-Source-Dir:
X-Source-Sender: (thunderfish.local) [96.231.225.44]:63147
X-Source-Auth: sean.turner@ieca.com
X-Email-Count: 1
X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IzMjg2Lmhvc3RnYXRvci5jb20=
Subject: Re: [jose] I-D Action: draft-ietf-jose-use-cases-05.txt
X-BeenThere: jose@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Javascript Object Signing and Encryption <jose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jose>, <mailto:jose-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/jose>
List-Post: <mailto:jose@ietf.org>
List-Help: <mailto:jose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jose>, <mailto:jose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Sep 2013 00:16:44 -0000

I'm just nitting for now:

1) s2

OLD:

The JOSE working group charter calls for the group to define three basic 
JSON object formats:

NEW:

Three basic JSON object formats are initially defined, with more 
possibly defined later:

2) s2

OLD:

The JOSE working group items intended to describe these formats are JSON 
Web Signature (JWS), JSON Web Encryption (JWE), and JSON Web Key (JWK), 
respectively [I-D.ietf-jose-json-web-signature] 
[I-D.ietf-jose-json-web-encryption] [I-D.ietf-jose-json-web-key].

NEW:

The JSON Web Signature (JWS), JSON Web Encryption (JWE), and JSON Web 
Key (JWK) specifications, respectively 
[I-D.ietf-jose-json-web-signature] [I-D.ietf-jose-json-web-encryption] 
[I-D.ietf-jose-json-web-key], define these formats.

3) s3: Not sure the following is entirely correct for DH-based algs:

  o  The JOSE encrypted object format must support object encryption in
     the case where the sender has only a public key for the receiver.

Shouldn't this also include the case where the sender has their own 
public key and the receiver's public key.

spt