Re: [jose] Alissa Cooper's No Objection on draft-ietf-jose-json-web-encryption-33: (with COMMENT)

Mike Jones <> Tue, 14 October 2014 12:42 UTC

Return-Path: <>
Received: from localhost ( []) by (Postfix) with ESMTP id D96E71A87AC; Tue, 14 Oct 2014 05:42:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id jCznAMm1JFLy; Tue, 14 Oct 2014 05:42:29 -0700 (PDT)
Received: from ( [IPv6:2a01:111:f400:fc10::704]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by (Postfix) with ESMTPS id 953D81A879F; Tue, 14 Oct 2014 05:42:28 -0700 (PDT)
Received: from ( by ( with Microsoft SMTP Server (TLS) id 15.0.1049.19; Tue, 14 Oct 2014 12:42:05 +0000
Received: from ( by ( with Microsoft SMTP Server (TLS) id 15.0.1054.13 via Frontend Transport; Tue, 14 Oct 2014 12:42:04 +0000
Received: from ( by ( with Microsoft SMTP Server (TLS) id 15.0.1039.16 via Frontend Transport; Tue, 14 Oct 2014 12:42:04 +0000
Received: from ([]) by ([]) with mapi id 14.03.0210.003; Tue, 14 Oct 2014 12:41:36 +0000
From: Mike Jones <>
To: Alissa Cooper <>
Thread-Topic: Alissa Cooper's No Objection on draft-ietf-jose-json-web-encryption-33: (with COMMENT)
Thread-Index: Ac/nrC3j0WCSG0OVTuucXCix8C0lig==
Date: Tue, 14 Oct 2014 12:41:36 +0000
Message-ID: <>
Accept-Language: en-US
Content-Language: en-US
x-originating-ip: []
Content-Type: multipart/alternative; boundary="_000_4E1F6AAD24975D4BA5B16804296739439BB0D163TK5EX14MBXC286r_"
MIME-Version: 1.0
X-EOPAttributedMessage: 0
X-Forefront-Antispam-Report: CIP:; CTRY:US; IPV:CAL; IPV:NLI; IPV:NLI; EFV:NLI; SFV:NSPM; SFS:(10019020)(438002)(51914003)(164054003)(43784003)(24454002)(189002)(199003)(13464003)(52044002)(377454003)(20776003)(66066001)(68736004)(69596002)(19300405004)(85806002)(64706001)(77096002)(76482002)(107046002)(19580395003)(86362001)(54356999)(50986999)(44976005)(80022003)(6806004)(19580405001)(92566001)(2656002)(106466001)(99396003)(87936001)(85306004)(230783001)(85852003)(512954002)(81156004)(86612001)(46102003)(15975445006)(95666004)(71186001)(84326002)(84676001)(104016003)(97736003)(31966008)(33656002)(110136001)(19625215002)(26826002)(120916001)(19617315012)(92726001)(21056001)(4396001)(16236675004)(55846006)(15202345003); DIR:OUT; SFP:1102; SCL:1; SRVR:BL2PR03MB385;; FPR:; MLV:ovrnspm; PTR:InfoDomainNonexistent; MX:1; A:1; LANG:en;
X-Microsoft-Antispam: UriScan:;
X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:;SRVR:BL2PR03MB385;
X-O365ENT-EOP-Header: Message processed by - O365_ENT: Allow from ranges (Engineering ONLY)
X-Exchange-Antispam-Report-Test: UriScan:;
X-Forefront-PRVS: 03648EFF89
Received-SPF: Pass ( domain of designates as permitted sender); client-ip=;;
Authentication-Results: spf=pass (sender IP is;
Cc: "" <>, "" <>, IESG <>, "" <>
Subject: Re: [jose] Alissa Cooper's No Objection on draft-ietf-jose-json-web-encryption-33: (with COMMENT)
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Javascript Object Signing and Encryption <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Tue, 14 Oct 2014 12:42:37 -0000

These comments are addressed in the -34 specification.  Thanks again for your review.

                                                            -- Mike

From: Alissa Cooper []
Sent: Wednesday, October 01, 2014 11:10 AM
To: Mike Jones
Cc: IESG;<>;<>;<>
Subject: Re: Alissa Cooper's No Objection on draft-ietf-jose-json-web-encryption-33: (with COMMENT)

Hi Mike,

On Sep 29, 2014, at 3:50 PM, Mike Jones <<>> wrote:

Thanks for your review, Alissa.  I've added the working group to this thread so they're aware of your comments.  Replies are inline below...

-----Original Message-----
From: Alissa Cooper []
Sent: Sunday, September 28, 2014 7:23 PM
To: The IESG
Subject: Alissa Cooper's No Objection on draft-ietf-jose-json-web-encryption-33: (with COMMENT)

Alissa Cooper has entered the following ballot position for
draft-ietf-jose-json-web-encryption-33: No Objection

When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.)

Please refer to
for more information about IESG DISCUSS and COMMENT positions.

The document, along with other ballot positions, can be found here:


== Section 2 ==
It seems a bit odd that some of these terms are re-defined by this document rather than re-using existing definitions, e.g. from RFC 4949 (plaintext, ciphertext, etc.). Was that deliberate?

Thanks for the RFC 4949 reference.  I propose that we use those definitions, where applicable.

== Section 4.1 ==
"As indicated by the common registry, JWSs and JWEs share a common
   Header Parameter space; when a parameter is used by both
   specifications, its usage must be compatible between the

Since both the JWS and JWE specifications are on their way to becoming RFCs, would it make more sense to say "its usage is compatible between the specifications"? Or is this for the future when new parameters may get defined?

This text is applicable both to the current documents and to future registrations in the IANA JSON Web Signature and Encryption Header Parameters Registry.  The registration instructions include this text, reinforcing this requirement:
   The same Header Parameter name can be
   registered multiple times, provided that the parameter usage is
   compatible between the specifications.  Different registrations of
   the same Header Parameter name will typically use different Header
   Parameter Usage Location(s) values.

                                                            -- Mike

Ah, ok. In the 4.1 text I didn't get the implied "both specifications that defined a parameter with the same name."