Re: [jose] #50: "cty" (content type) should hold a media type

John Bradley <ve7jtb@ve7jtb.com> Mon, 16 September 2013 20:51 UTC

Return-Path: <ve7jtb@ve7jtb.com>
X-Original-To: jose@ietfa.amsl.com
Delivered-To: jose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 816B221F84EA for <jose@ietfa.amsl.com>; Mon, 16 Sep 2013 13:51:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.599
X-Spam-Level:
X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sKcA2ND4S5An for <jose@ietfa.amsl.com>; Mon, 16 Sep 2013 13:51:17 -0700 (PDT)
Received: from mail-pb0-f46.google.com (mail-pb0-f46.google.com [209.85.160.46]) by ietfa.amsl.com (Postfix) with ESMTP id AB54F11E81C8 for <jose@ietf.org>; Mon, 16 Sep 2013 13:51:16 -0700 (PDT)
Received: by mail-pb0-f46.google.com with SMTP id rq2so4541270pbb.5 for <jose@ietf.org>; Mon, 16 Sep 2013 13:51:16 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:content-type:mime-version:subject:from :in-reply-to:date:cc:message-id:references:to; bh=R0hNP5dbQ3vnq9VvmRAvjYRp+q7Yu/AiU+A0KzEr/B4=; b=WJ4+3rTrV8wSooZAvh4lnIbNgO2SnhRYqox/ytjl2rAfIuZzh0iIF7YC+hjU8osGTS 8g2lVvmKcBfh7oeRGyeqMCdYgL0R/utun2E/MTAoXzHp5d68aKuGDwbyB8ucUibm5ZW+ zpY3pyMYnuW3Dq13bLOc47zPmGaajJ0ufMptB4wermLH3kj4dYoUWMfp+RXVDhDgevGr A8o8jCwmk+/84JrwKwH9Nrw8c1CxBEtx1c+Og5WJpe7yUsbj+zL2sKpMzQEn0EPV1ldf BbjnXVRjiUgLpcayJrrtCMLxw0+WVbbReYh8MebZXmHariLF9IKTNKfoQI5pZdYCsVL+ vTAg==
X-Gm-Message-State: ALoCoQnBvd5DL2p6UlkbA8X3u0qu591rmtHG9LoYLiQ4b77I6ynBLHQwWyJmAfJsEuOeqFsKjhTs
X-Received: by 10.66.216.234 with SMTP id ot10mr5345712pac.122.1379364676233; Mon, 16 Sep 2013 13:51:16 -0700 (PDT)
Received: from [192.168.0.17] (S0106602ad09850b5.va.shawcable.net. [70.78.20.194]) by mx.google.com with ESMTPSA id iu7sm33230272pbc.45.1969.12.31.16.00.00 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 16 Sep 2013 13:51:12 -0700 (PDT)
Content-Type: multipart/signed; boundary="Apple-Mail=_D55E469D-EB96-4A84-8766-49517469BF19"; protocol="application/pkcs7-signature"; micalg="sha1"
Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\))
From: John Bradley <ve7jtb@ve7jtb.com>
In-Reply-To: <CE8995AB5D178F44A2154F5C9A97CAF402581D803FB4@HE111541.emea1.cds.t-internal.com>
Date: Mon, 16 Sep 2013 13:51:09 -0700
Message-Id: <86DCD696-1420-426E-8C05-6C23D19083AD@ve7jtb.com>
References: <058.0d74b4153b360c16ccd3d64acacfc6f3@trac.tools.ietf.org> <073.b3ecbc54a761c68cd123ac96652e0240@trac.tools.ietf.org> <CE8995AB5D178F44A2154F5C9A97CAF402581D803FB4@HE111541.emea1.cds.t-internal.com>
To: Axel.Nennker@telekom.de
X-Mailer: Apple Mail (2.1508)
Cc: michael.jones@microsoft.com, trac+jose@trac.tools.ietf.org, jose@ietf.org, draft-ietf-jose-json-web-signature@tools.ietf.org
Subject: Re: [jose] #50: "cty" (content type) should hold a media type
X-BeenThere: jose@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Javascript Object Signing and Encryption <jose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jose>, <mailto:jose-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/jose>
List-Post: <mailto:jose@ietf.org>
List-Help: <mailto:jose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jose>, <mailto:jose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 16 Sep 2013 20:51:22 -0000

I think mime types should be compared as octets rater than introduce folding rules.  So it would be good to say that when they are used they MUST be lowercase as is the convention.

I think keeping the current short names is fine, and not likely to cause confusion.

John B.
On 2013-09-16, at 1:41 PM, <Axel.Nennker@telekom.de> wrote:

> +1 for keeping the compact form for cty
> 
> I would even stay with case sensivity for mime-types because in (all?) other cases in JOSE we are comparing octets as-is to avoid complexity.
> [Canonicalization is evil]
> 
> -axel
> 
> -----Original Message-----
> From: jose-bounces@ietf.org [mailto:jose-bounces@ietf.org] On Behalf Of jose issue tracker
> Sent: Friday, September 13, 2013 8:12 PM
> To: draft-ietf-jose-json-web-signature@tools.ietf.org; michael.jones@microsoft.com
> Cc: jose@ietf.org
> Subject: Re: [jose] #50: "cty" (content type) should hold a media type
> 
> #50: "cty" (content type) should hold a media type
> 
> 
> Comment (by michael.jones@microsoft.com):
> 
> Originally "typ" and "cty" values were in their own IANA type space that  was independent of MIME types.  Quite some time ago (I believe based on  comments from Jim), the working group decided to add a field in the types  registry allowing the correspondence between the short-by-design JOSE type  names and MIME types to be registered.  At the time, we also decided to  allow the use of MIME types in those fields, which is fine in cases where  compactness isn't a goal.
> 
> However, for many cases, compactness is a goal, and the current solution  is designed with that in mind, and is already working fine.  I don't see a  compelling reason to change it at this point.  It's already used, for  instance, in Section 6 of JWK, for indicating that a JWK or JWK Set are  the encrypted content.  It's used by JWT for saying that a JWT is the  encrypted content.  Etc.
> 
> To address your concerns about the "MAY be used" language, I propose that  "MAY be used" be changed to "is used".  You're right that the "OPTIONAL"
> phrase already covers the "MAY" intent.
> 
> To address your concerns about MIME types being case insensitive, I  propose that we add this text after saying that MIME types values may be
> used: "When MIME Media Types values are used, it is RECOMMENDED that they  use the exact character case used in the registry, since this field is  case sensitive, whereas MIME values are case insensitive."
> 
> -- 
> -------------------------+----------------------------------------------
> -------------------------+---
> Reporter:               |       Owner:  draft-ietf-jose-json-web-
>  james@manger.com.au    |  signature@tools.ietf.org
>     Type:  defect       |      Status:  new
> Priority:  major        |   Milestone:
> Component:  json-web-    |     Version:
>  signature              |  Resolution:
> Severity:  -            |
> Keywords:               |
> -------------------------+----------------------------------------------
> -------------------------+---
> 
> Ticket URL: <http://trac.tools.ietf.org/wg/jose/trac/ticket/50#comment:1>
> jose <http://tools.ietf.org/jose/>
> 
> _______________________________________________
> jose mailing list
> jose@ietf.org
> https://www.ietf.org/mailman/listinfo/jose
> _______________________________________________
> jose mailing list
> jose@ietf.org
> https://www.ietf.org/mailman/listinfo/jose