Re: [Json-canon] Proposed Charter

Anders Rundgren <anders.rundgren.net@gmail.com> Thu, 24 January 2019 23:15 UTC

Return-Path: <anders.rundgren.net@gmail.com>
X-Original-To: json-canon@ietfa.amsl.com
Delivered-To: json-canon@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EB28B1311EA for <json-canon@ietfa.amsl.com>; Thu, 24 Jan 2019 15:15:17 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iXo1Ki2-1MpV for <json-canon@ietfa.amsl.com>; Thu, 24 Jan 2019 15:15:16 -0800 (PST)
Received: from mail-wm1-x332.google.com (mail-wm1-x332.google.com [IPv6:2a00:1450:4864:20::332]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A265813108C for <json-canon@ietf.org>; Thu, 24 Jan 2019 15:15:15 -0800 (PST)
Received: by mail-wm1-x332.google.com with SMTP id m22so4886156wml.3 for <json-canon@ietf.org>; Thu, 24 Jan 2019 15:15:15 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=GlbFc1Mdm4fO4qSKyK00MzKsRpQBDktOGpBo2SdOLiY=; b=I+GnNhujUhAphHgzltY1cMdyVYYdLL4GGIcKp9v+/2YLyoxhz6DBiinwiQqJI3qbkx x3ek9U1GWo3UlCzSU+PecHAvP8oIekD5fiqH7k/Qkm2WV2P3577VJGdRgIKix9pHFDxP 0Uc4TJgK7+ZYFXa6peaPY5MXib260vZhr7ViQuRc/Fvas8VurS6Ozq3gE+De82z0xzH7 XFl8WxaEM1IMTjLfVK64j6/xbS5PEhh1Q9XqstaUttSmPuM/d69rgT0c8/G5fhfgCRBz R7Z7VwJeRAKmAcBjR84Osn+QfdaoWhvvOspMNOxQ75NxRG9YdKKR8sZ8WR1nco+lpRFR oueQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=GlbFc1Mdm4fO4qSKyK00MzKsRpQBDktOGpBo2SdOLiY=; b=GNVdJBfSDuKpivyF/M0oaiTSi52EJOj1aFvAA4frwo0S1NPDxD2Tr4otKQ1z2mJ5kz Q4xTMEjOFSgaRHbkDKILWuAbazEiQqWehD4M0aNfTFs7KbuPLbZ28wRv6Hw+37PFSOQo lGLFie+gmwRCKmBuL2DwSlQTKuwgtJgxo7qzC9rHnG+V1lkkK8NYlS5cORSzCy3WSzlu cHKOhLDvDxYrbPlTFre1wCp9I9owMf+os1vICR5/ciI0QJDwXuAmhD3cvX2X6BwJKF+X BCJErkfv8SRS/vOmC7cWsS3bVhBnzuf/aqahLpoxyGLnCgyqzGy0TiWKwXKx9NifK+RI /d1g==
X-Gm-Message-State: AJcUukfxk8A5uY9U0pBgyEDDVNwulNDK9HsI+nKqGrzaGXoPtbhrpcwF 5ecQmAA/Qa/8L+bhXu2Jwu2GHpzG
X-Google-Smtp-Source: ALg8bN5iZWu4JcOPMQR+OH1QTY6HI8RDYWJsBDCjjIPWsZlZzFI7Oe2s4eNNBx0e5W66WkWE+9T+vA==
X-Received: by 2002:a1c:8851:: with SMTP id k78mr4568256wmd.51.1548371713513; Thu, 24 Jan 2019 15:15:13 -0800 (PST)
Received: from [192.168.1.79] (25.131.146.77.rev.sfr.net. [77.146.131.25]) by smtp.googlemail.com with ESMTPSA id s66sm54225428wmf.34.2019.01.24.15.15.11 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 24 Jan 2019 15:15:12 -0800 (PST)
To: Mark Nottingham <mnot@mnot.net>, Allan Thomson <athomson@lookingglasscyber.com>
Cc: Bret Jordan <jordan.ietf@gmail.com>, "json-canon@ietf.org" <json-canon@ietf.org>
References: <069AE75F-45F0-4C46-8AB6-8B734073261B@gmail.com> <797CD514-E3CE-40C2-9360-21B31372D9AE@mnot.net> <347d7716-570f-169b-1ea9-62cc83d346f0@gmail.com> <D39ED435-7DA6-439E-A71F-4789974AA1D2@mnot.net> <46cd19f4-62e7-bc46-84d9-3fd647f8ede9@gmail.com> <C4B4D8D8-B7D5-4963-9E0F-06BFDFB0F246@mnot.net> <741572B2-8826-41F4-B15D-E538141771BF@lookingglasscyber.com> <80F418FE-277C-4B02-894D-95D3A23437DD@mnot.net>
From: Anders Rundgren <anders.rundgren.net@gmail.com>
Message-ID: <36bcf4eb-f22f-e549-33dd-3fc39be65504@gmail.com>
Date: Fri, 25 Jan 2019 00:15:06 +0100
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.4.0
MIME-Version: 1.0
In-Reply-To: <80F418FE-277C-4B02-894D-95D3A23437DD@mnot.net>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/json-canon/sKIWBD1_FovNvLTYlBghCg9fv_4>
Subject: Re: [Json-canon] Proposed Charter
X-BeenThere: json-canon@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: JSON Canonicalization <json-canon.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/json-canon>, <mailto:json-canon-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/json-canon/>
List-Post: <mailto:json-canon@ietf.org>
List-Help: <mailto:json-canon-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/json-canon>, <mailto:json-canon-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 24 Jan 2019 23:15:18 -0000

On 2019-01-24 23:49, Mark Nottingham wrote:
> I wasn't suggesting that every possible data type be in the charter; it just seems good to set expectations about whether they're allowed at *all* (and if they are, perhaps some sort of general parameters for what's in-scope).

For the primary application of this spec, "hashable JSON", there is no need to bother about anything but the core primitives.

For sub-type strings like a hypothetical BigNumber, a comparison between "3e+500" and "3.0e+500" wont work as expected.

Thanx, this will obviously be needed in the charter as well as in an updated draft!

Anders

> 
> 
>> On 24 Jan 2019, at 2:46 pm, Allan Thomson <athomson@lookingglasscyber.com> wrote:
>>
>> Currently, many *do* define base64 binary as strings in JSON and this effort would be more useful to them if it included them.
>>
>> I'm not sure why we would want to be so prescriptive or restrictive on every last data type. It seems like if a reasonable use case requires a data type being included then having to redo the charter just to include it seems cumbersome.
>>
>> Allan
>>
>> On 1/24/19, 2:42 PM, "json-canon on behalf of Mark Nottingham" <json-canon-bounces@ietf.org on behalf of mnot@mnot.net> wrote:
>>
>>     I'm primarily concerned that people will want to invite new subtypes, e.g. "base64'd binary in a string." A good charter would make that clearly in or out of scope.
>>
>>     Cheers,
>>
>>
>>> On 24 Jan 2019, at 2:40 pm, Anders Rundgren <anders.rundgren.net@gmail.com> wrote:
>>>
>>> On 2019-01-24 23:14, Mark Nottingham wrote:
>>>> I saw that, but it wasn't clear whether that was a starting point, or a limit.
>>>
>>> It is the current proposal/definition.  It limits the JSON Number type to IEEE-754 double precision (=strict I-JSON).
>>>
>>> https://tools.ietf.org/html/draft-rundgren-json-canonicalization-scheme-03#section-3.2.2.3
>>>
>>> Do you think this should be in the charter?
>>>
>>> thanx,
>>> Anders
>>>
>>>> Cheers,
>>>>> On 24 Jan 2019, at 2:06 pm, Anders Rundgren <anders.rundgren.net@gmail.com> wrote:
>>>>>
>>>>> On 2019-01-24 22:55, Mark Nottingham wrote:
>>>>>> Will the Working Group limit itself to canonicalising the data model that's described by JSON's native data types (object, array, number, string, boolean, null), or will it attempt to canonicalise subtypes -- for example, inside strings (whether they be key or value)?
>>>>>
>>>>> It is possible that I misunderstand your question but the charter talks about using
>>>>>
>>>>> "...the serialization methods for JSON primitives defined by EcmaScript version 6"
>>>>>
>>>>> which means that strings and numbers are normalized (null and boolean already have a fixed form).
>>>>>
>>>>> Is this the explanation you miss?
>>>>>
>>>>> thanx,
>>>>> Anders
>>>>>
>>>>>> I'd be much more comfortable if this were addressed explicitly in the charter.
>>>>>> Cheers,
>>>>>>> On 24 Jan 2019, at 10:56 am, Bret Jordan <jordan.ietf@gmail.com> wrote:
>>>>>>>
>>>>>>> All,
>>>>>>>
>>>>>>> Here is a proposed charter for this WG.  Please send any comments on this charter to this email list.
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> ### BEGIN
>>>>>>>
>>>>>>> JavaScript Object Notation (JSON) is a text format for the serialization of structured data described in RFC 8259. The JSON format is often used for serializing and transmitting structured data over a network connection. With the increased usage of JSON in protocols in the IETF and elsewhere, there is now a need to define a canonical representation of JSON objects to enable comparison operations and security services on plain text JSON.
>>>>>>>
>>>>>>> Different proposals for providing such security services have already been defined and implemented. The goal of the Working Group is to define and standardize a mechanism for creating a canonical representation of plain text JSON objects.
>>>>>>>
>>>>>>> This group is chartered to work on the following deliverable:
>>>>>>>
>>>>>>> - A Standards Track document specifying a canonical representation of JSON data.
>>>>>>>
>>>>>>> In order to promote interoperability and ease of implementation, the current proposal builds on I-JSON (RFC 7493), the serialization methods for JSON primitives defined by EcmaScript version 6, and a platform-independent method for sorting object properties.  By doing that, JSON parsers will not need modifications, enabling the described mechanism to ultimately be reduced to an option in JSON serializers.
>>>>>>>
>>>>>>> The proposed work-item is tentatively named JSON Canonicalization Scheme (JCS)
>>>>>>>
>>>>>>> ### END
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> Thanks,
>>>>>>> Bret
>>>>>>> PGP Fingerprint: 63B4 FC53 680A 6B7D 1447  F2C0 74F8 ACAE 7415 0050
>>>>>>> "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."
>>>>>>>
>>>>>>> -- 
>>>>>>> json-canon mailing list
>>>>>>> json-canon@ietf.org
>>>>>>> https://www.ietf.org/mailman/listinfo/json-canon
>>>>>> --
>>>>>> Mark Nottingham   https://www.mnot.net/
>>>>>
>>>> --
>>>> Mark Nottingham   https://www.mnot.net/
>>>
>>
>>     --
>>     Mark Nottingham   https://www.mnot.net/
>>
>>     --
>>     json-canon mailing list
>>     json-canon@ietf.org
>>     https://www.ietf.org/mailman/listinfo/json-canon
>>
>>
> 
> --
> Mark Nottingham   https://www.mnot.net/
>