Re: [jose] #158: Section 7. Security Considerations

"jose issue tracker" <trac+jose@trac.tools.ietf.org> Thu, 07 November 2013 02:45 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: jose issue tracker <trac+jose@trac.tools.ietf.org>
Precedence: bulk
Auto-Submitted: auto-generated
To: draft-ietf-jose-json-web-algorithms@tools.ietf.org, ietf@augustcellars.com
Date: Thu, 07 Nov 2013 02:44:25 -0000
Message-ID: <076.e15b95a6f814e7208f4370eb97b91d18@trac.tools.ietf.org>
References: <061.3c673ad4841c1cc6c7ff45f10da106b1@trac.tools.ietf.org>
In-Reply-To: <061.3c673ad4841c1cc6c7ff45f10da106b1@trac.tools.ietf.org>
Resent-To: mbj@microsoft.com
Resent-Message-Id: <20131107024440.14F2311E822E@ietfa.amsl.com>
Resent-Date: Wed, 06 Nov 2013 18:44:39 -0800
Resent-From: trac+jose@trac.tools.ietf.org
Cc: jose@ietf.org
Subject: Re: [jose] #158: Section 7. Security Considerations

#158: Section 7. Security Considerations

Description changed by ietf@augustcellars.com:

Old description:

> A.  DSS does not appear to have a security considerations section.  It is
> not clear the entire list of documents has any good reason to be
> considered in this list.  This appears to just be a shotgun approach
> rather than a considered approach.
>
> B.  Algorithms will be deprecated in the registry rather than removed
> from this specification
>
> C.  Where do I find the security considerations for use of the algorithms
> in this document?  The general statement without pointers is going to
> mean it is ignored.
>
> D.  Is the recommendation for matching the key size of the wrapped key
> and the wrapping key in the body of the text or is it just here?

New description:

 A.  DSS does not appear to have a security considerations section.  It is
 not clear the entire list of documents has any good reason to be
 considered in this list.  This appears to just be a shotgun approach
 rather than a considered approach.

 B.  Algorithms will be deprecated in the registry rather than removed from
 this specification

 C.  Where do I find the security considerations for use of the algorithms
 in this document?  The general statement without pointers is going to mean
 it is ignored.

 * FIXED

 D.  Is the recommendation for matching the key size of the wrapped key and
 the wrapping key in the body of the text or is it just here?

 * FIXED

--

-- 
-------------------------+-------------------------------------------------
 Reporter:               |       Owner:  draft-ietf-jose-json-web-
  ietf@augustcellars.com |  algorithms@tools.ietf.org
     Type:  defect       |      Status:  new
 Priority:  Editorial    |   Milestone:
Component:  json-web-    |     Version:
  algorithms             |  Resolution:
 Severity:  -            |
 Keywords:               |
-------------------------+-------------------------------------------------

Ticket URL: <http://trac.tools.ietf.org/wg/jose/trac/ticket/158#comment:1>
jose <http://tools.ietf.org/jose/>

[jose] #158: Section 7. Security Considerations jose issue tracker
Re: [jose] #158: Section 7. Security Consideratio… jose issue tracker
Re: [jose] #158: Section 7. Security Consideratio… jose issue tracker
Re: [jose] #158 (json-web-algorithms): Section 7.… jose issue tracker