Re: [Rats] EAT IANA registry

One of our thoughts is that EAT profiles will help with this. For example, a special profile for toasters might list 5 claims that must be included in every attestation and 10 claims that are optional and maybe even prohibit all others.

LL

> On Nov 22, 2019, at 6:57 AM, Yaron Sheffer <yaronf.ietf@gmail.com> wrote:
> 
> Hi Hannes,
>  
> Looking at the JWT claim IANA registry [1], it is already a terrible mess of several different standards, obviously with many more coming. I guess what’s done is done, and I’ll take back my objection.
>  
> Thanks,
>                 Yaron
>  
> [1] https://www.iana.org/assignments/jwt/jwt.xhtml#claims <https://www.iana.org/assignments/jwt/jwt.xhtml#claims>
>  
> From: Hannes Tschofenig <Hannes.Tschofenig@arm.com <mailto:Hannes.Tschofenig@arm.com>>
> Date: Friday, November 22, 2019 at 14:17
> To: Yaron Sheffer <yaronf.ietf@gmail.com <mailto:yaronf.ietf@gmail.com>>, "rats@ietf.org <mailto:rats@ietf.org>" <rats@ietf.org <mailto:rats@ietf.org>>
> Subject: RE: EAT IANA registry
>  
> Yaron, 
> Could you explain why you think that this is a good idea? 
> Ciao
> Hannes
>  
> From: RATS <rats-bounces@ietf.org <mailto:rats-bounces@ietf.org>> On Behalf Of Yaron Sheffer
> Sent: Friday, November 22, 2019 2:05 PM
> To: rats@ietf.org <mailto:rats@ietf.org>
> Subject: [Rats] EAT IANA registry
>  
> Unrelated to my earlier mail, I would recommend to create a separate registry for EAT claims (I suppose that implies a nested object in the JWT/CWT) rather than to overload the CWT registry. Architecturally it just doesn’t jive to have all these claims as baseline CWT claims, and process-wise, it’s much more convenient for this group to control its own namespace.
>  
> Sorry if this has been raised before.
>  
> Thanks,
>                 Yaron
> IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you. 
> _______________________________________________
> RATS mailing list
> RATS@ietf.org <mailto:RATS@ietf.org>
> https://www.ietf.org/mailman/listinfo/rats <https://www.ietf.org/mailman/listinfo/rats>