Re: [jose] Proposal about the SPI proposal

Richard Barnes <rlb@ipv.sx> Wed, 20 February 2013 18:03 UTC

Return-Path: <rlb@ipv.sx>
X-Original-To: jose@ietfa.amsl.com
Delivered-To: jose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 324E821F8503 for <jose@ietfa.amsl.com>; Wed, 20 Feb 2013 10:03:40 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.267
X-Spam-Level:
X-Spam-Status: No, score=-2.267 tagged_above=-999 required=5 tests=[AWL=0.709, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sBRDGwxE4KOC for <jose@ietfa.amsl.com>; Wed, 20 Feb 2013 10:03:39 -0800 (PST)
Received: from mail-ob0-f180.google.com (mail-ob0-f180.google.com [209.85.214.180]) by ietfa.amsl.com (Postfix) with ESMTP id 2280821F84FF for <jose@ietf.org>; Wed, 20 Feb 2013 10:03:39 -0800 (PST)
Received: by mail-ob0-f180.google.com with SMTP id ef5so8091287obb.11 for <jose@ietf.org>; Wed, 20 Feb 2013 10:03:38 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:x-received:x-originating-ip:in-reply-to:references :date:message-id:subject:from:to:cc:content-type:x-gm-message-state; bh=IEG29wlhyM9fz75yq0Edvm4gukuRdDSlIb0G6JWeKg4=; b=H+E5m5RbYOsy/ZhRxU2spyvzUw1OiFSlxuhbMVfitmt+Bm/6tzOJhadFVRWvfPbc2h qtyYa0nweQ9imUrYpW87GMYqDzo/eNM8CsaJt8B0AaEspyyh+3idCZ1D89WUNju/pChX KPtlx3eFB1ftIoi3CY/S9Ncq4mKq6ktqrXddZ2QslNCglgj3cRxOw1iSup/FsJXycuYg yTt1hJBCYvEs6IfikVsH1Nqtj8Zsk7MHLeU7cw1XlaS449mWIK80iJvjPIC8HGVPIXO/ Uyk5YrZZu5RI74tvnG1T5LlXE++J5GpPW3+o9/Vvm1cjLY9GKfumXsCbujRehrPAz+j5 pxYQ==
MIME-Version: 1.0
X-Received: by 10.182.221.105 with SMTP id qd9mr7090103obc.97.1361383418657; Wed, 20 Feb 2013 10:03:38 -0800 (PST)
Received: by 10.60.60.98 with HTTP; Wed, 20 Feb 2013 10:03:38 -0800 (PST)
X-Originating-IP: [128.89.253.50]
In-Reply-To: <CABzCy2D9MVw2WTZCFn9PaQ8Mw1e2=Abguf2Q2QzuFshqJqUtZQ@mail.gmail.com>
References: <CA+k3eCTo_=P_SQCG_ypiksVb-bfjuJ4Q9vt4r10wpuKPbFUWBg@mail.gmail.com> <1360628984.83146.YahooMailRC@web184403.mail.bf1.yahoo.com> <CABzCy2D9MVw2WTZCFn9PaQ8Mw1e2=Abguf2Q2QzuFshqJqUtZQ@mail.gmail.com>
Date: Wed, 20 Feb 2013 13:03:38 -0500
Message-ID: <CAL02cgRQ9nWwpUgLbx1yE_dj=kg9-L-+cJS6std53-W9Ac_CaQ@mail.gmail.com>
From: Richard Barnes <rlb@ipv.sx>
To: Nat Sakimura <sakimura@gmail.com>
Content-Type: multipart/alternative; boundary="f46d0447f2f8127a5004d62bc741"
X-Gm-Message-State: ALoCoQlobqwsQjSXqujDbkxEPhNggV4qCbT22kvX9LhvOH1Cbb/7OAyE09TM1fvMHmu9ZcUXlqnR
Cc: Brian Campbell <bcampbell@pingidentity.com>, "jose@ietf.org" <jose@ietf.org>, Edmund Jay <ejay@mgi1.com>
Subject: Re: [jose] Proposal about the SPI proposal
X-BeenThere: jose@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Javascript Object Signing and Encryption <jose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jose>, <mailto:jose-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/jose>
List-Post: <mailto:jose@ietf.org>
List-Help: <mailto:jose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jose>, <mailto:jose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 20 Feb 2013 18:03:40 -0000

Obviously, this will not be in a -00 draft for Orlando.  So discussion
should continue based on the text proposed to the list.

Does anyone have further technical comments?

--Richard


On Wed, Feb 20, 2013 at 11:25 AM, Nat Sakimura <sakimura@gmail.com> wrote:

> ditto.
>
> 2013/2/11 Edmund Jay <ejay@mgi1.com>
>
>> +1 for new I-D.
>>
>>
>>
>> ------------------------------
>> *From:* Brian Campbell <bcampbell@pingidentity.com>
>> *To:* "jose@ietf.org" <jose@ietf.org>
>> *Sent:* Fri, February 8, 2013 3:01:51 PM
>> *Subject:* [jose] Proposal about the SPI proposal
>>
>> Maybe this was apparent from my comments/questions on the SPI proposal
>> over the last couple days[1] but I have concerns that run the gamut from
>> operational complexity and fragility to security problems. I believe
>> strongly that, without considerably more analysis and specification detail,
>> the current SPI work is much too risky to consider go in the current base
>> JOSE WG drafts.
>>
>> As an alternative I'd like to request/propose that the SPI stuff be
>> submitted as new I-D to help facilitate that additional discussion and
>> analysis that I think it needs.
>>
>> Thanks,
>> Brian
>>
>> [1] http://www.ietf.org/mail-archive/web/jose/current/msg01500.html
>>
>> _______________________________________________
>> jose mailing list
>> jose@ietf.org
>> https://www.ietf.org/mailman/listinfo/jose
>>
>>
>
>
> --
> Nat Sakimura (=nat)
> Chairman, OpenID Foundation
> http://nat.sakimura.org/
> @_nat_en
>
> _______________________________________________
> jose mailing list
> jose@ietf.org
> https://www.ietf.org/mailman/listinfo/jose
>
>