[Jwt-reg-review] [IANA #1352928] Request for Assignment (jwt, CTA-5009)

David Dong via RT <iana-prot-param-comment@iana.org> Tue, 06 February 2024 18:55 UTC

Return-Path: <iana-shared@icann.org>
X-Original-To: jwt-reg-review@ietfa.amsl.com
Delivered-To: jwt-reg-review@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 02C03C14F70C for <jwt-reg-review@ietfa.amsl.com>; Tue, 6 Feb 2024 10:55:47 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.637
X-Spam-Level:
X-Spam-Status: No, score=-5.637 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.249, MISSING_HEADERS=1.021, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BFqxFY9uC9c4 for <jwt-reg-review@ietfa.amsl.com>; Tue, 6 Feb 2024 10:55:43 -0800 (PST)
Received: from smtp.lax.icann.org (smtp.lax.icann.org [IPv6:2620:0:2d0:201::1:81]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 125B9C14F702 for <jwt-reg-review@ietf.org>; Tue, 6 Feb 2024 10:55:43 -0800 (PST)
Received: from request6.lax.icann.org (request1.lax.icann.org [10.32.11.221]) by smtp.lax.icann.org (Postfix) with ESMTP id 4D581E1C07; Tue, 6 Feb 2024 18:55:42 +0000 (UTC)
Received: by request6.lax.icann.org (Postfix, from userid 48) id 379FD60EAA; Tue, 6 Feb 2024 18:55:42 +0000 (UTC)
RT-Owner: david.dong
From: David Dong via RT <iana-prot-param-comment@iana.org>
Reply-To: iana-prot-param-comment@iana.org
In-Reply-To: <rt-5.0.3-1157285-1706825544-1322.1352928-9-0@icann.org>
References: <RT-Ticket-1352928@icann.org> <rt-5.0.3-1104910-1706036005-376.1352928-9-0@icann.org> <rt-5.0.3-96476-1706119200-1688.1352928-9-0@icann.org> <rt-5.0.3-1120593-1706812087-1771.1352928-9-0@icann.org> <CA+k3eCSm3GwkzY0YgP4N-Pxu70tYvjwYy9y_dVFQi_5z35L6Fw@mail.gmail.com> <rt-5.0.3-1157285-1706825544-1322.1352928-9-0@icann.org>
Message-ID: <rt-5.0.3-562144-1707245742-822.1352928-9-0@icann.org>
X-RT-Loop-Prevention: IANA
X-RT-Ticket: IANA #1352928
X-Managed-BY: RT 5.0.3 (http://www.bestpractical.com/rt/)
X-RT-Originator: david.dong@iana.org
CC: bcampbell@pingidentity.com, ve7jtb@ve7jtb.com, michael_b_jones@hotmail.com, jwt-reg-review@ietf.org
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-RT-Original-Encoding: utf-8
Precedence: bulk
Date: Tue, 06 Feb 2024 18:55:42 +0000
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/jwt-reg-review/w-ApCL_NZCz8dWehpmJqVLPnDIQ>
Subject: [Jwt-reg-review] [IANA #1352928] Request for Assignment (jwt, CTA-5009)
X-BeenThere: jwt-reg-review@ietf.org
X-Mailman-Version: 2.1.39
List-Id: "Expert review of proposed IANA registrations for JSON Web Token \(JWT\) claims." <jwt-reg-review.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jwt-reg-review>, <mailto:jwt-reg-review-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/jwt-reg-review/>
List-Post: <mailto:jwt-reg-review@ietf.org>
List-Help: <mailto:jwt-reg-review-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jwt-reg-review>, <mailto:jwt-reg-review-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 06 Feb 2024 18:55:47 -0000

Hi Brian,

Apologies for the delay in my response, and thank you for the review. Thank you also for attaching a copy for the other reviewers.

We plan to put [CTA-5009] as the reference, linking to <https://shop.cta.tech/collections/standards/products/fast-and-readable-geographical-hashing-cta-5009>. 

There are already some existing registrations with specifications either difficult to access or paywalled that we link to in the "Reference" field in other Specification Required registries (namely the ISO specs), for reference.

Please let us know if this registration in JWT is okay, or if we should wait for other reviewers to respond (we will mark this as OK one week after approval otherwise).

Best regards,

David Dong
IANA Services Sr. Specialist

On Thu Feb 01 22:12:24 2024, bcampbell@pingidentity.com wrote:
> I honestly don't have the knowledge to evaluate the semantics of this
> "geohash" claim but don't  in general object to its registration. It seems
> okay to add.
> 
> I will note, however, that the registration request does not have the
> "Specification Document(s):" part listed in the original registration
> template <https://datatracker.ietf.org/doc/html/rfc7519#section-10.1.1>.
> What does IANA plan to put in the corresponding "Reference" column of the
> registry <https://www.iana.org/assignments/jwt/jwt.xhtml#claims>? I don't
> think it can be omitted. The registry is supposed to "record the Claim Name
> and a reference to the specification that defines it" according to the text
> that establishes it
> <https://datatracker.ietf.org/doc/html/rfc7519#section-10.1> (presumably so
> that folks can find the corresponding specifications from the registry
> entries). I suspect a similar question might arise for the CBOR and CWT
> registration requests as well.
> 
> This sort of speaks to the Fast and Readable Geographical Hashing CTA-5009
> specification being unfortunately rather cumbersome to access. It is
> available free of charge, as mentioned, but requires a shopping cart and a
> checkout process that requests some personal information. I've attached a
> copy here for the convenience of other reviewers.
> 
> CTA-5009 Final.pdf
> 
> On Thu, Feb 1, 2024 at 11:28 AM David Dong via RT <
> iana-prot-param-comment@iana.org> wrote:
> 
> > Dear John Bradley, Brian Campbell, and Michael B. Jones (cc:
> > jwt-reg-review),
> >
> > Following up on this; as the designated experts for the JSON Web Token
> > Claims registry, can you review the JWT Claim registration proposal below?
> > If it's OK, we'll make the assignment at:
> >
> > https://www.iana.org/assignments/jwt/
> >
> > Unless you ask us to wait for the other reviewers, we’ll act one week
> > after the first response we receive.
> >
> > The due date is February 14th.
> >
> > With thanks,
> >
> > David Dong
> > IANA Services Sr. Specialist
> >
> > On Wed Jan 24 18:00:00 2024, david.dong wrote:
> > > Dear John Bradley, Brian Campbell, and Michael B. Jones (cc: jwt-reg-
> > > review),
> > >
> > > As the designated experts for the JSON Web Token Claims registry, can
> > > you review the JWT Claim registration proposal below? If it's OK,
> > > we'll make the assignment at:
> > >
> > > https://www.iana.org/assignments/jwt/
> > >
> > > Unless you ask us to wait for the other reviewers, we’ll act one week
> > > after the first response we receive.
> > >
> > > The due date is February 14th.
> > >
> > > With thanks,
> > >
> > > David Dong
> > > IANA Services Sr. Specialist
> > >
> > > On Tue Jan 23 18:53:25 2024, david.dong wrote:
> > > > Contact Name:
> > > > Chris Lemmons
> > > >
> > > > Contact Email:
> > > > alficles@gmail.com
> > > >
> > > > Type of Assignment:
> > > > Permanent
> > > >
> > > > Registry:
> > > > CBOR Tag, JSON Web Token Claims, CBOR Web Token Claims
> > > >
> > > > Description:
> > > > These tags and claims are defined in CTA-5009, which was recently
> > > > published by the Consumer Technology Association. The specification
> > > > is
> > > > available free of charge at
> > > > https://shop.cta.tech/collections/standards/products/fast-and-
> > > > readable-geographical-hashing-cta-5009 , but a courtesy copy can be
> > > > provided to IANA and any relevant experts on request if desired.
> > > >
> > > > Additional Info:
> > > > These are defined in CTA-5009 as noted above. These define tags and
> > > > claims for the storage of Geohash strings and arrays. As described in
> > > > the document:
> > > >
> > > > Show quoted text
> > > > article on Wikipedia. These are excellent resources, but they can
> > > > change over time
> > > > and are not generally suitable for building on in a consensus-based
> > > > standards-making process.
> > > > This document exists to remediate that. It describes the practice as
> > > > it exists at the time of writing and
> > > > provides general, straightforward algorithms for understanding and
> > > > communicating with Geohashes. It
> > > > also exists to serve as a stable reference document for a few IANA
> > > > registrations.
> > > >
> > > > To that end, we request these numbers:
> > > >
> > > > CBOR Tag:
> > > >
> > > > Tag: 105
> > > > Data Item: text string or array
> > > > Semantics: Geohash String
> > > > Point of Contact: Consumer Technology Association
> > > >
> > > > Tag: 279
> > > > Data Item: array
> > > > Semantics: Coordinate Reference System Wrapper
> > > > Point of Contact: Consumer Technology Association
> > > >
> > > > JWT Claim:
> > > >
> > > > Claim Name: geohash
> > > > Claim Description: Geohash String or Array
> > > > Change Controller: Consumer Technology Association
> > > >
> > > > CWT Claim:
> > > >
> > > > Claim Name: geohash
> > > > Claim Description: Geohash String
> > > > JWT Claim Name: geohash
> > > > Claim Key: 282
> > > > Claim Value Type(s): text string or array
> > > > Change Controller: Consumer Technology Association
> >
> >
>