Re: [jose] Barry Leiba's No Objection on draft-ietf-jose-json-web-encryption-32: (with COMMENT)

[Mike Jones <[e-mail]>]

> -----Original Message-----
> From: Jim Schaad [mailto:[e-mail]]
> Sent: Sunday, October 19, 2014 3:20 PM
> To: Mike Jones; 'Barry Leiba'
> Cc: [e-mail]; jose-
> [e-mail]; 'The IESG'; [e-mail]
> Subject: RE: [jose] Barry Leiba's No Objection on draft-ietf-jose-json-web-
> encryption-32: (with COMMENT)
> 
> > -----Original Message-----
> > From: Mike Jones [mailto:[e-mail]]
> > Sent: Saturday, October 18, 2014 3:28 PM
> > To: Jim Schaad; 'Barry Leiba'
> > Cc: [e-mail]; jose-
> > [e-mail]; 'The IESG'; [e-mail]
> > Subject: RE: [jose] Barry Leiba's No Objection on
> draft-ietf-jose-json-web-
> > encryption-32: (with COMMENT)
> >
> > > > The intent is b.  I propose that the words "This member MUST be
> > > > present, even if the array elements contain only the empty JSON
> > > > object "{}"" be changed to "This member MUST be present with
> > > > exactly one array element per recipient, even if some or all of
> > > > the array element values are the empty JSON object {}".  Would that be
> clearer?
> > >
> > > I think that would have helped me.  Again, another small point.
> > >
> > > OK
> > >
> > > [JLS]  I think that this language may not be correct.  Did you mean
> > > to
> imply
> > that the following is a legal value for the "recipients" property.
> "[{},{}]"
> > > It appears that there can be any number of empty array elements can
> > > be
> > present.
> > >
> > > If this is not the case I will try and look at proposing some text.
> >
> > The full text about the recipients array at
> http://tools.ietf.org/html/draft-
> > ietf-jose-json-web-encryption-35#section-7.2 is:
> >
> >    recipients
> >       The "recipients" member value MUST be an array of JSON objects.
> >       Each object contains information specific to a single recipient.
> >       This member MUST be present with exactly one array element per
> >       recipient, even if some or all of the array element values are the
> >       empty JSON object "{}" (which can happen when all Header Parameter
> >       values are shared between all recipients and when no encrypted key
> >       is used, such as when doing Direct Encryption).
> >
> > So it's not that any number of empty array elements can be present.
> > It's
> that
> > exactly one JSON object must be present in the array per recipient,
> > some
> of
> > which may be empty because of the parameter choices made.
> 
> This does not answer my question.  Is it a legal value?

[{},{}] is a legal value in the case that there are exactly two recipients, both of which have no per-recipient header parameter values or encrypted key values.

> Jim
> 
> >
> > 				-- Mike

				-- Mike