Re: [POSH] What's the point of using JWKs in POSH?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

This discussion is moved to xmpp@ietf.org, which is the working group
where this work will continue forward.  Everyone is still welcome to
discuss this draft, and should join the xmpp@ietf.org mailing list.

- -- 
- - m&m

Matt Miller < mamille2@cisco.com >
Cisco Systems, Inc.

On 5/20/14, 12:42 PM, Thijs Alkemade wrote:
> Hello,
> 
> Today, I've spent some time on trying to implement POSH-checking
> for xmpp.net. My implementation aimed to do two things: doing the
> validation as described and showing someone how they could set up
> their .well-known file by converting their X509 certificates to
> JSON Web Keys.
> 
> The latter part was a lot more work than the former and made me
> wonder why it is defined the way it is.
> 
> From draft-ietf-xmpp-posh:
> 
> Each included JWK object MUST possess the following information:
> 
> o  The "kty" field set to the appropriate key type used for TLS 
> connections (e.g., "RSA" for a certificate using an RSA key).
> 
> o  The required public parameters for the key type (e.g., "n" and
> "e" for a certificate using an RSA key).
> 
> o  The "x5t" field set to the certificate thumbprint, as described
> in section 3.6 of [JOSE-JWK].
> 
> Yet the data that is required in the first and second bullet is
> never used. It doesn't specify if and how clients should verify it.
> Verification only uses the x5t field and optionally x5c.
> 
> There are good arguments for "pinning" just the public key.
> draft-ietf-websec- key-pinning only uses the SPKI field, DANE can
> use either the full cert or its SPKI field (and optionally hashed).
> But the way it is specified here won't allow that: the x5t field
> always needs to be present and clients should verify it.
> 
> So the public parameters of the key are useless here, but they make
> a key >10x as large is they have to be. Generating them is also not
> as easy: most certificate viewers show a SHA1 fingerprint and it's
> really easy to do with the openssl cli tool, but extracting n and e
> and base64-encoding them is a lot more work. I wouldn't even know
> what to do for ECDSA keys.
> 
> Are there any interoperability reasons for using JWKs that I'm not
> aware of? Couldn't it just use a list of SHA1 hashes?
> 
> Best regards, Thijs
> 
> 
> 
> _______________________________________________ posh mailing list 
> posh@ietf.org https://www.ietf.org/mailman/listinfo/posh
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
Comment: GPGTools - https://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBCgAGBQJTj5sWAAoJEDWi+S0W7cO1jR8IALP3IUg19Y83h9XJyTWxbhik
6vy/gCPqCOfYHz5276ZoiCX3LdZ/+0sDC/Thdv5xb+fDGT2pXIabPH/sp7AZFoiq
uk2CakhCx5TuajcaxK0DpTLqPeiOGHBVKPXmFUggSvqiLnhGNzy8fa3a9S5kdZMt
AiRWumNL2NJkInk3B7AyFV0NMwXGR6PSxU4F+nc5oHVUntT1+6hfO7u6Tq/uTUXo
sHQsp4prZHqKBHteWsI6wtyhcHAWjiSs2DVr7aNVz/4pI8xVpRVgriH3Lt9WGMuQ
qpqao4YwRQU1FtPDSFibfHO2/cr563de7ITpGN6X7TIA979zb6VcgrQCkcAauC8=
=V9n0
-----END PGP SIGNATURE-----