Re: [jose] way forward for two remaining drafts
<Axel.Nennker@telekom.de> Thu, 16 July 2015 05:54 UTC
Return-Path: <Axel.Nennker@telekom.de>
X-Original-To: jose@ietfa.amsl.com
Delivered-To: jose@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A2EA81B315A for <jose@ietfa.amsl.com>; Wed, 15 Jul 2015 22:54:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.859
X-Spam-Level:
X-Spam-Status: No, score=-3.859 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LgzOIHlYGa0E for <jose@ietfa.amsl.com>; Wed, 15 Jul 2015 22:54:42 -0700 (PDT)
Received: from tcmail13.telekom.de (tcmail13.telekom.de [80.149.113.165]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 07DA01B3159 for <jose@ietf.org>; Wed, 15 Jul 2015 22:54:40 -0700 (PDT)
Received: from q4de8psa169.blf.telekom.de ([10.151.13.200]) by tcmail11.telekom.de with ESMTP; 16 Jul 2015 07:54:38 +0200
X-IronPort-AV: E=Sophos;i="5.15,485,1432591200"; d="scan'208,217";a="871039585"
Received: from he113414.emea1.cds.t-internal.com ([10.125.65.80]) by q4de8psazkj.blf.telekom.de with ESMTP/TLS/AES128-SHA; 16 Jul 2015 07:54:38 +0200
Received: from HE111541.emea1.cds.t-internal.com ([10.125.90.97]) by HE113414.emea1.cds.t-internal.com ([::1]) with mapi; Thu, 16 Jul 2015 07:54:37 +0200
From: Axel.Nennker@telekom.de
To: kathleen.moriarty.ietf@gmail.com, ejay@mgi1.com
Date: Thu, 16 Jul 2015 07:54:36 +0200
Thread-Topic: [jose] way forward for two remaining drafts
Thread-Index: AdC9mTWpWS29QcjNQXqFlrZcW/f/NQB8kkdA
Message-ID: <CE8995AB5D178F44A2154F5C9A97CAF4028D07DBA788@HE111541.emea1.cds.t-internal.com>
References: <CABzCy2A_yxx+WFSLJiw5ZBPfGaR5de5Lf0uaPFbaMGOnzWSnpg@mail.gmail.com> <1984212955.1265704.1436807438162.JavaMail.yahoo@mail.yahoo.com> <9823EFCA-CE49-4AD5-BC6A-BCD15A1C765E@gmail.com>
In-Reply-To: <9823EFCA-CE49-4AD5-BC6A-BCD15A1C765E@gmail.com>
Accept-Language: de-DE
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: de-DE
Content-Type: multipart/alternative; boundary="_000_CE8995AB5D178F44A2154F5C9A97CAF4028D07DBA788HE111541eme_"
MIME-Version: 1.0
Archived-At: <http://mailarchive.ietf.org/arch/msg/jose/TWOlarxa8XCrjMbhsI-ItfwgILo>
Cc: Michael.Jones@microsoft.com, sakimura@gmail.com, odonoghue@isoc.org, jose@ietf.org
Subject: Re: [jose] way forward for two remaining drafts
X-BeenThere: jose@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Javascript Object Signing and Encryption <jose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jose>, <mailto:jose-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/jose/>
List-Post: <mailto:jose@ietf.org>
List-Help: <mailto:jose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jose>, <mailto:jose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 16 Jul 2015 05:54:45 -0000
Will review and probably implement this. Nits: s/some of have/some have/ While this cryptographically binds the protected Header Parameters to the integrity protected payload, some of have described use cases in which this binding is unnecessary and/or an impediment to adoption, especially when the payload is large and/or detached. Should read: While this cryptographically binds the protected Header Parameters to the integrity protected payload, some have described use cases in which this binding is unnecessary and/or an impediment to adoption, especially when the payload is large and/or detached. Is it an argument for not base64url encoding payloads that they remain human/developer readable? This argument would make draft-jones-jose-jws-signing-input-options useful for small payloads too. -Axel From: jose [mailto:jose-bounces@ietf.org] On Behalf Of Kathleen Moriarty Sent: Montag, 13. Juli 2015 20:25 To: Edmund Jay Cc: Mike Jones; Nat Sakimura; jose@ietf.org; Karen O'Donoghue Subject: Re: [jose] way forward for two remaining drafts Hello, It's good too see that a few people do support these drafts. Will each of you be sending reviews and comments to the list shortly on these drafts? If the chairs think it's reasonable to accept the drafts, they will also need to know there will be active support. Thanks, Kathleen Sent from my iPhone On Jul 13, 2015, at 1:10 PM, Edmund Jay <ejay@mgi1.com<mailto:ejay@mgi1.com>> wrote: +1 ________________________________ From: Nat Sakimura <sakimura@gmail.com<mailto:sakimura@gmail.com>> To: Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com<mailto:kathleen.moriarty.ietf@gmail.com>> Cc: Mike Jones <Michael.Jones@microsoft.com<mailto:Michael.Jones@microsoft.com>>; Karen O'Donoghue <odonoghue@isoc.org<mailto:odonoghue@isoc.org>>; "jose@ietf.org<mailto:jose@ietf.org>" <jose@ietf.org<mailto:jose@ietf.org>> Sent: Sunday, July 12, 2015 10:32 AM Subject: Re: [jose] way forward for two remaining drafts Sorry to chime in so late. I have been completely under water for sometime now. Like Phil, I do see that draft-jones-jose-jws-signing-input-options sort of thing can be very useful, though I may want to have slightly different way of encoding the things. Being able to do detached signature is quite attractive. Best, Nat 2015-07-10 2:37 GMT+09:00 Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com<mailto:kathleen.moriarty.ietf@gmail.com>>: Hi, Sent from my iPhone On Jul 9, 2015, at 1:16 PM, Mike Jones <Michael.Jones@microsoft.com<mailto:Michael.Jones@microsoft.com>> wrote: About https://tools.ietf.org/html/draft-jones-jose-jws-signing-input-options-00, I’ll add that this addresses the requests make by Jim Schaad and Richard Barnes in JOSE Issues #26 “Allow for signature payload to not be base64 encoded” and #23 http://trac.tools.ietf.org/wg/jose/trac/ticket/23 “Make crypto independent of binary encoding (base64)”. About https://tools.ietf.org/html/draft-jones-jose-key-managed-json-web-signature-01, I’ll add that this addresses the request made by Jim Schaad in JOSE Issue #2 http://trac.tools.ietf.org/wg/jose/trac/ticket/2 “No key management for MAC”. Also, there’s a highly relevant discussion about key management for MACs going on in the COSE working group. See the thread “[Cose] Key management for MACs (was Re: Review of draft-schaad-cose-msg-01)” – especially https://mailarchive.ietf.org/arch/msg/cose/aUehU6O7Ui8CXcGxy3TquZOxWH4 and https://mailarchive.ietf.org/arch/msg/cose/ouOIdAOe2P-W8BjGLJ7BNvvRr10. One could take the view that our decision on the JOSE key management draft should be informed by the related decision in COSE. Specifically, that if COSE decides to support key management for MACs, the same reasoning likely should apply to our decision on whether to define a standard mechanism for supporting key management for MACs in JOSE. Key management is explicitly out-of-scope for COSE as stated in the charter. The discussion referenced had this point at the close of that discussion. I'm not seeing much support for these drafts moving forward in JOSE. I'm also not seeing enough to justify standards track and AD sponsored. If you think these are important to have move forward in the WG or as standards track, please say so soon. They can still go forward through the Independent submission process through the ISE. Thank you, Kathleen -- Mike From: jose [mailto:jose-bounces@ietf.org] On Behalf Of Karen O'Donoghue Sent: Wednesday, July 01, 2015 8:38 AM To: jose@ietf.org<mailto:jose@ietf.org> Subject: [jose] way forward for two remaining drafts Folks, With the thumbprint draft progressing through the process, we have two remaining individual drafts to decide what to do with. The options include: 1) adopt as working group drafts; 2) ask for AD sponsorship of individual drafts; or 3) recommend that they not be published. Please express your thoughts on what we should do with these drafts. Jim, Kathleen, and I would like to make a decision in the Prague timeframe, so please respond by 15 July. https://tools.ietf.org/id/draft-jones-jose-jws-signing-input-options-00.txt https://tools.ietf.org/id/draft-jones-jose-key-managed-json-web-signature-01.txt Thanks, Karen _______________________________________________ jose mailing list jose@ietf.org<mailto:jose@ietf.org> https://www.ietf.org/mailman/listinfo/jose _______________________________________________ jose mailing list jose@ietf.org<mailto:jose@ietf.org> https://www.ietf.org/mailman/listinfo/jose -- Nat Sakimura (=nat) Chairman, OpenID Foundation http://nat.sakimura.org/ @_nat_en _______________________________________________ jose mailing list jose@ietf.org<mailto:jose@ietf.org> https://www.ietf.org/mailman/listinfo/jose
- Re: [jose] way forward for two remaining drafts Brian Campbell
- [jose] way forward for two remaining drafts Karen O'Donoghue
- Re: [jose] way forward for two remaining drafts Anders Rundgren
- Re: [jose] way forward for two remaining drafts Phillip Hallam-Baker
- Re: [jose] way forward for two remaining drafts Martin Thomson
- Re: [jose] way forward for two remaining drafts Mike Jones
- Re: [jose] way forward for two remaining drafts Mike Jones
- Re: [jose] way forward for two remaining drafts Kathleen Moriarty
- Re: [jose] way forward for two remaining drafts Nat Sakimura
- Re: [jose] way forward for two remaining drafts John Bradley
- Re: [jose] way forward for two remaining drafts Axel.Nennker
- Re: [jose] way forward for two remaining drafts nov matake
- Re: [jose] way forward for two remaining drafts Prabath Siriwardena
- Re: [jose] way forward for two remaining drafts Edmund Jay
- Re: [jose] way forward for two remaining drafts Kathleen Moriarty
- Re: [jose] way forward for two remaining drafts Anders Rundgren
- Re: [jose] way forward for two remaining drafts Phillip Hallam-Baker
- Re: [jose] way forward for two remaining drafts Edmund Jay
- Re: [jose] way forward for two remaining drafts Salvatore D'Agostino
- Re: [jose] way forward for two remaining drafts George Fletcher
- Re: [jose] way forward for two remaining drafts Prabath Siriwardena
- Re: [jose] way forward for two remaining drafts Prabath Siriwardena
- Re: [jose] way forward for two remaining drafts Axel.Nennker
- Re: [jose] way forward for two remaining drafts hideki nara
- Re: [jose] way forward for two remaining drafts HAYASHI, Tatsuya
- Re: [jose] way forward for two remaining drafts Nat Sakimura
- Re: [jose] way forward for two remaining drafts Mike Jones
- Re: [jose] way forward for two remaining drafts Matias Woloski
- Re: [jose] way forward for two remaining drafts Wendy Seltzer
- Re: [jose] way forward for two remaining drafts Mike Jones
- [jose] Consensus calls for signing-input-options … Karen O'Donoghue