[jose] Re: I-D Action: draft-ietf-jose-json-web-proof-06.txt

David Waite <david@alkaline-solutions.com> Mon, 16 September 2024 20:34 UTC

From: David Waite <david@alkaline-solutions.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_55BA467C-35EA-4B1B-8736-B5B8DDB4CEB1"
Mime-Version: 1.0
Date: Mon, 16 Sep 2024 14:34:36 -0600
References: <172651828199.307.14903043523372262968@dt-datatracker-65695bf5bc-rgg8z>
To: jose@ietf.org
In-Reply-To: <172651828199.307.14903043523372262968@dt-datatracker-65695bf5bc-rgg8z>
Message-Id: <0DA8AC36-2CE0-4351-9311-5B3E060FA7A9@alkaline-solutions.com>
Message-ID-Hash: PLRJFHD62HJZON3PFDMH4KWPEV73ZDUQ
Precedence: list
Subject: [jose] Re: I-D Action: draft-ietf-jose-json-web-proof-06.txt
Archived-At: <https://mailarchive.ietf.org/arch/msg/jose/vJSR8yRAcX9WFvQNmugynQEjhLg>

Hello everyone!

In addition to the documents moving to a new home on GitHub ( http://github.com/ietf-wg-jose/json-web-proof ), this draft has a number of changes:

1. A section detailing encryption of JWPs (via wrapping in JWE) is provided

2. While we haven’t yet reached consensus on removal of JSON serialization, additional text detailing both compact and JSON serialization has been added. A call-out was added that both serializations represent the same data and are thus interchangeable without breaking the proof value.

3. Fully detached payloads are specified as an application option, similar to detached content in JWS

-DW

> On Sep 16, 2024, at 2:24 PM, internet-drafts@ietf.org wrote:
> 
> Internet-Draft draft-ietf-jose-json-web-proof-06.txt is now available. It is a
> work item of the Javascript Object Signing and Encryption (JOSE) WG of the
> IETF.
> 
>   Title:   JSON Web Proof
>   Authors: Jeremie Miller
>            David Waite
>            Michael B. Jones
>   Name:    draft-ietf-jose-json-web-proof-06.txt
>   Pages:   26
>   Dates:   2024-09-16
> 
> Abstract:
> 
>   The JOSE set of standards established JSON-based container formats
>   for Keys, Signatures, and Encryption.  They also established IANA
>   registries to enable the algorithms and representations used for them
>   to be extended.  Since those were created, newer cryptographic
>   algorithms that support selective disclosure and unlinkability have
>   matured and started seeing early market adoption.
> 
>   This document defines a new container format similar in purpose and
>   design to JSON Web Signature (JWS) called a _JSON Web Proof (JWP)_.
>   Unlike JWS, which integrity-protects only a single payload, JWP can
>   integrity-protect multiple payloads in one message.  It also
>   specifies a new presentation form that supports selective disclosure
>   of individual payloads, enables additional proof computation, and
>   adds a protected header to prevent replay.
> 
> The IETF datatracker status page for this Internet-Draft is:
> https://datatracker.ietf.org/doc/draft-ietf-jose-json-web-proof/
> 
> There is also an HTML version available at:
> https://www.ietf.org/archive/id/draft-ietf-jose-json-web-proof-06.html
> 
> A diff from the previous version is available at:
> https://author-tools.ietf.org/iddiff?url2=draft-ietf-jose-json-web-proof-06
> 
> Internet-Drafts are also available by rsync at:
> rsync.ietf.org::internet-drafts
> 
> 
> _______________________________________________
> jose mailing list -- jose@ietf.org
> To unsubscribe send an email to jose-leave@ietf.org

[jose] I-D Action: draft-ietf-jose-json-web-proof… internet-drafts
[jose] Re: I-D Action: draft-ietf-jose-json-web-p… David Waite