IETF Logo Mail Archive

Re: [openpgp] "OpenPGP Simple"

Derek Atkins <derek@ihtfp.com> Fri, 20 March 2015 16:26 UTC

Return-Path: <derek@ihtfp.com>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 107361A1A3E for <openpgp@ietfa.amsl.com>; Fri, 20 Mar 2015 09:26:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.289
X-Spam-Level:
X-Spam-Status: No, score=-1.289 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_MISMATCH_ORG=0.611] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tWWOchT_h4D1 for <openpgp@ietfa.amsl.com>; Fri, 20 Mar 2015 09:26:24 -0700 (PDT)
Received: from mail2.ihtfp.org (MAIL2.IHTFP.ORG [204.107.200.7]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DC9B71A1A04 for <openpgp@ietf.org>; Fri, 20 Mar 2015 09:26:23 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by mail2.ihtfp.org (Postfix) with ESMTP id AE08CE2038; Fri, 20 Mar 2015 12:26:22 -0400 (EDT)
Received: from mail2.ihtfp.org ([127.0.0.1]) by localhost (mail2.ihtfp.org [127.0.0.1]) (amavisd-maia, port 10024) with ESMTP id 27083-01; Fri, 20 Mar 2015 12:26:20 -0400 (EDT)
Received: from securerf.ihtfp.org (unknown [IPv6:fe80::ea2a:eaff:fe7d:235]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mocana.ihtfp.org", Issuer "IHTFP Consulting Certification Authority" (verified OK)) by mail2.ihtfp.org (Postfix) with ESMTPS id 8E993E2036; Fri, 20 Mar 2015 12:26:20 -0400 (EDT)
Received: (from warlord@localhost) by securerf.ihtfp.org (8.14.8/8.14.8/Submit) id t2KGQK9N030568; Fri, 20 Mar 2015 12:26:20 -0400
From: Derek Atkins <derek@ihtfp.com>
To: Phillip Hallam-Baker <phill@hallambaker.com>
References: <9A043F3CF02CD34C8E74AC1594475C73AAFB3811@uxcn10-5.UoA.auckland.ac.nz> <E5CD0AF9-2933-4938-805C-EAE1A45C3D39@callas.org> <CAMm+LwifSRn8by5-1-_S0GGPRnLdVYQbj19h3fTEygH0f+utbw@mail.gmail.com>
Date: Fri, 20 Mar 2015 12:26:20 -0400
In-Reply-To: <CAMm+LwifSRn8by5-1-_S0GGPRnLdVYQbj19h3fTEygH0f+utbw@mail.gmail.com> (Phillip Hallam-Baker's message of "Tue, 17 Mar 2015 12:30:03 -0400")
Message-ID: <sjmzj77fxeb.fsf@securerf.ihtfp.org>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain
X-Virus-Scanned: Maia Mailguard 1.0.2a
Archived-At: <http://mailarchive.ietf.org/arch/msg/openpgp/zFYE2T8oQ33k_hn9gVU1eQ0VFlg>
Cc: "openpgp@ietf.org" <openpgp@ietf.org>, Jon Callas <jon@callas.org>, Peter Gutmann <pgut001@cs.auckland.ac.nz>
Subject: Re: [openpgp] "OpenPGP Simple"
X-BeenThere: openpgp@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/openpgp>, <mailto:openpgp-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/openpgp/>
List-Post: <mailto:openpgp@ietf.org>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/openpgp>, <mailto:openpgp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Mar 2015 16:26:31 -0000

Phillip Hallam-Baker <phill@hallambaker.com> writes:

> We have been having a similar discussion in ACME which is for issue of
> certificates for use in TLS, email, etc.
>
> The body of the message is going to be JSON. But the message needs to be
> signed. After a number of proposals we seem to have settled on a scheme in
> which the start of the message is a JSON header carrying the signature which is
> followed by a JSON message carrying the transaction request or response.

Okay, I'll bite..  Why don't you use JWS?  That would seem to be the
appropriate way to sign JSON, no?

-derek
-- 
       Derek Atkins                 617-623-3745
       derek@ihtfp.com             www.ihtfp.com
       Computer and Internet Security Consultant

v2.23.0 | Report a Bug | By Email