Re: [OAUTH-WG] Disable JWK "use" parameter for octet sequence keys?
Vladimir Dzhuvinov <vladimir@connect2id.com> Tue, 21 April 2015 12:52 UTC
Return-Path: <vladimir@connect2id.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 237781ACD80 for <oauth@ietfa.amsl.com>; Tue, 21 Apr 2015 05:52:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.879
X-Spam-Level:
X-Spam-Status: No, score=-0.879 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MISSING_HEADERS=1.021, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qkJ4g6t0iYYV for <oauth@ietfa.amsl.com>; Tue, 21 Apr 2015 05:52:56 -0700 (PDT)
Received: from p3plsmtpa08-10.prod.phx3.secureserver.net (p3plsmtpa08-10.prod.phx3.secureserver.net [173.201.193.111]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 23F221ACD7C for <oauth@ietf.org>; Tue, 21 Apr 2015 05:52:56 -0700 (PDT)
Received: from [192.168.0.106] ([77.77.164.50]) by p3plsmtpa08-10.prod.phx3.secureserver.net with id Jcsu1q00115ZTut01csufu; Tue, 21 Apr 2015 05:52:55 -0700
Message-ID: <55364825.8020609@connect2id.com>
Date: Tue, 21 Apr 2015 15:52:53 +0300
From: Vladimir Dzhuvinov <vladimir@connect2id.com>
Organization: Connect2id Ltd.
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0
MIME-Version: 1.0
CC: "oauth@ietf.org" <oauth@ietf.org>
References: <55337CEE.2090605@connect2id.com> <CA+k3eCSOftiVg=ANtUFFMGUJpkRwgRcqeyNkpZXsayzXhFamOA@mail.gmail.com>
In-Reply-To: <CA+k3eCSOftiVg=ANtUFFMGUJpkRwgRcqeyNkpZXsayzXhFamOA@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Archived-At: <http://mailarchive.ietf.org/arch/msg/oauth/Fl-U_X0nEqxE1alPg4XaDF3tw10>
Subject: Re: [OAUTH-WG] Disable JWK "use" parameter for octet sequence keys?
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 21 Apr 2015 12:52:57 -0000
I'm sorry, I've unintentionally posted here instead of to JOSE. On 20.04.2015 21:07, Brian Campbell wrote: > IMHO "use" is less useful for JWKs of type "oct" but not to the point of > disallowing it. > > Your question is probably better suited for the JOSE WG list though, rather > than OAUTH. > > > > On Sun, Apr 19, 2015 at 4:01 AM, Vladimir Dzhuvinov <vladimir@connect2id.com >> wrote: >> A developer working with the Nimbus jose+jwt library raised the question >> whether setting of the public "use" [1] parameter should be disabled for >> JWKs of type "oct". This appears to make sense, even though the JWA spec >> [2] doesn't mention it. Is this correct? >> >> Thanks, >> >> Vladimir >> >> [1] http://tools.ietf.org/html/draft-ietf-jose-json-web-key-40#section-4.2 >> [2] >> >> http://tools.ietf.org/html/draft-ietf-jose-json-web-algorithms-40#section-6.4 >> >> >> _______________________________________________ >> OAuth mailing list >> OAuth@ietf.org >> https://www.ietf.org/mailman/listinfo/oauth >> -- Vladimir Dzhuvinov :: vladimir@connect2id.com
- [OAUTH-WG] Disable JWK "use" parameter for octet … Vladimir Dzhuvinov
- Re: [OAUTH-WG] Disable JWK "use" parameter for oc… Brian Campbell
- Re: [OAUTH-WG] Disable JWK "use" parameter for oc… Vladimir Dzhuvinov