[jose] Is this a legal JOSE message

Jim Schaad <ietf@augustcellars.com> Tue, 29 October 2019 22:55 UTC

Return-Path: <ietf@augustcellars.com>
X-Original-To: jose@ietfa.amsl.com
Delivered-To: jose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8264A120118 for <jose@ietfa.amsl.com>; Tue, 29 Oct 2019 15:55:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3sSqfJiSp9eE for <jose@ietfa.amsl.com>; Tue, 29 Oct 2019 15:55:56 -0700 (PDT)
Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CE8AA120112 for <jose@ietf.org>; Tue, 29 Oct 2019 15:55:55 -0700 (PDT)
Received: from Jude (192.168.0.11) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Tue, 29 Oct 2019 15:55:28 -0700
From: Jim Schaad <ietf@augustcellars.com>
To: jose@ietf.org
Date: Tue, 29 Oct 2019 15:55:25 -0700
Message-ID: <043901d58eab$f58789b0$e0969d10$@augustcellars.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----=_NextPart_000_043A_01D58E71.4928FFD0"
X-Mailer: Microsoft Outlook 16.0
Thread-Index: AdWOqnnmQQa1pxV6QKubkYwxSQ8Fuw==
Content-Language: en-us
X-Originating-IP: [192.168.0.11]
Archived-At: <https://mailarchive.ietf.org/arch/msg/jose/txiTVo35DVZDEQ5Hou8HqhMBePk>
Subject: [jose] Is this a legal JOSE message
X-BeenThere: jose@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Javascript Object Signing and Encryption <jose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jose>, <mailto:jose-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/jose/>
List-Post: <mailto:jose@ietf.org>
List-Help: <mailto:jose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jose>, <mailto:jose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 29 Oct 2019 22:55:57 -0000

I have been trying to get my JOSE implementation back up to snuff because it
turns out that I need it for some of the ACE work.  Part of that means that
I am producing unit tests and making sure that each of the pieces works
correctly.  As part of that effort I ended up producing the attached file.
As near as I can tell from diving through the JWE and JWS specifications,
this is a legal JWE and JWS file.

1.  Please point me to the text in the two documents which says that this is
not a legal message.
2.  If the text does not exist, was it meant to be a legal message?
3.  If it was not meant to be a legal message, can we get some text to add
to both of the documents so that this will be detected as an illegal
message.

For people wishing to validate the message(s), I used the keys from the
cookbook.

Jim