Re: [jose] x5c, x5u, x5t don't apply to all key types

Brian Campbell <bcampbell@pingidentity.com> Wed, 17 July 2013 21:30 UTC

Return-Path: <bcampbell@pingidentity.com>
X-Original-To: jose@ietfa.amsl.com
Delivered-To: jose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 24FF921F9815 for <jose@ietfa.amsl.com>; Wed, 17 Jul 2013 14:30:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.976
X-Spam-Level:
X-Spam-Status: No, score=-5.976 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ixQYbIyJNznK for <jose@ietfa.amsl.com>; Wed, 17 Jul 2013 14:29:59 -0700 (PDT)
Received: from na3sys009aog111.obsmtp.com (na3sys009aog111.obsmtp.com [74.125.149.205]) by ietfa.amsl.com (Postfix) with ESMTP id 4CDD321F9970 for <jose@ietf.org>; Wed, 17 Jul 2013 14:29:59 -0700 (PDT)
Received: from mail-ie0-f173.google.com ([209.85.223.173]) (using TLSv1) by na3sys009aob111.postini.com ([74.125.148.12]) with SMTP ID DSNKUecM1klD5h+0tYW3k1dBaIdz2B1DD562@postini.com; Wed, 17 Jul 2013 14:29:59 PDT
Received: by mail-ie0-f173.google.com with SMTP id k13so5340313iea.32 for <jose@ietf.org>; Wed, 17 Jul 2013 14:29:58 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type:x-gm-message-state; bh=x3do4SSoHhNovXLlXgbuwfmzJBGFrh1D5uk1QmXp1RM=; b=CtPHf+Jr/k1Xix2EMh+DBeZ4MO5mUk49+8WDgo87fBPUwLuSe0TZwz1R+gf84N5P29 ceIVbhPjZZbDs3WXNz1F9yFeZHETGKeZFzOewMb/rp1G4azYFsgI9u8of1HJXRLrzv5q wg7ONFJrNZ+itfTKMGNiEUUiKWxABIvBpmeCGwpYKZWHyAN3qvPbB3l4b69cRG1WCIf0 uIr5Hf5JDNA7XOV3+Pg+X37xoXyjEO0040sgFuKLm9rPhLd8ar/q9pqDBoAzHZFvfAQG 2a4wZsfS3fMs8N/ehc7hGhys51Q92+Pr6lBmO0j9EAWe1l6NHrnP/RU2bZ0I0jND2Ywm F/VA==
X-Received: by 10.42.123.139 with SMTP id s11mr5484412icr.82.1374096598407; Wed, 17 Jul 2013 14:29:58 -0700 (PDT)
X-Received: by 10.42.123.139 with SMTP id s11mr5484393icr.82.1374096597304; Wed, 17 Jul 2013 14:29:57 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.64.41.34 with HTTP; Wed, 17 Jul 2013 14:29:27 -0700 (PDT)
In-Reply-To: <4E1F6AAD24975D4BA5B16804296739436B6CDA90@TK5EX14MBXC283.redmond.corp.microsoft.com>
References: <CA+k3eCSDiV3mYxZsieR1o5ryTBWM=JnwBDRgbkifLbKs3tm11g@mail.gmail.com> <4E1F6AAD24975D4BA5B16804296739436B6CDA90@TK5EX14MBXC283.redmond.corp.microsoft.com>
From: Brian Campbell <bcampbell@pingidentity.com>
Date: Wed, 17 Jul 2013 15:29:27 -0600
Message-ID: <CA+k3eCQDKTuXP_OsSmgUW2O1oj0hPsQ1s-vJ=adC-kDhA23Mxw@mail.gmail.com>
To: Mike Jones <Michael.Jones@microsoft.com>
Content-Type: multipart/alternative; boundary="20cf3010e71991e06204e1bbcb8e"
X-Gm-Message-State: ALoCoQkQaXoiChOqUWVuafvuwfEqRSMNI2xEw2zsHhRvnaue98pblGGnCZKHp2NOXol/kvmDms4J/QK9dOJSuEr+kR85tyEjII2vyXVP4DydzGssg1SC0QvpHBecjTYAX6pXVOE2mqCI
Cc: "jose@ietf.org" <jose@ietf.org>
Subject: Re: [jose] x5c, x5u, x5t don't apply to all key types
X-BeenThere: jose@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Javascript Object Signing and Encryption <jose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jose>, <mailto:jose-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/jose>
List-Post: <mailto:jose@ietf.org>
List-Help: <mailto:jose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jose>, <mailto:jose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Jul 2013 21:30:04 -0000

Works for me. As long as folks think "public key types" will be enough
understood. Seems like it would be.


On Wed, Jul 17, 2013 at 2:54 PM, Mike Jones <Michael.Jones@microsoft.com>wrote:

>  Thanks for noticing this.  How about “members that are common to all
> public key types”?****
>
> ** **
>
> You’re right about the section numbering.  I’ll fix that.****
>
> ** **
>
>                                                             Thanks again,*
> ***
>
>                                                             -- Mike****
>
> ** **
>
> *From:* jose-bounces@ietf.org [mailto:jose-bounces@ietf.org] *On Behalf
> Of *Brian Campbell
> *Sent:* Wednesday, July 17, 2013 12:34 PM
> *To:* jose@ietf.org
> *Subject:* [jose] x5c, x5u, x5t don't apply to all key types****
>
> ** **
>
> Section 3 of JWK [1] defines "members that are common to all key types"
> and includes among those members x5c, x5u and x5t. However, the x5X
> parameters are relevant only for half the key types defined in JWA - they
> don't really make sense for "oct" [2] or "PBKDF2" [3]. ****
>
> Not sure the best way to address this but it seems kind of awkward as it
> is. Maybe move them into the EC and RSA type definitions (or something
> common to both) or somehow add some qualifying text saying that they can
> only be used with key types utilizing public keys?****
>
> As I was looking up the URLs below I noticed that the section alignment in
> section 5 of JWA is a little off. I think 5.3.3 and 5.3.4 should probably
> be 5.4 and 5.5 respectively. Right now they line up as though they were
> part of the RSA key type.****
>
> ** **
>
> [1] http://tools.ietf.org/html/draft-ietf-jose-json-web-key-13#section-3
> [2]
> http://tools.ietf.org/html/draft-ietf-jose-json-web-algorithms-13#section-5.3.3
> [3]
> http://tools.ietf.org/html/draft-ietf-jose-json-web-algorithms-13#section-5.3.4
> ****
>