Re: [Rats] EAT IANA registry

Hi Laurence,

Yes, such profiles would certainly be helpful for attestation. 

Unfortunately they would not solve the fundamental problem that a developer who wishes to use JWT for anything, not necessarily attestation, is faced with a registry that he or she has no chance of figuring out.

Thanks,

                Yaron

From: Laurence Lundblade <lgl@island-resort.com>
Date: Saturday, November 23, 2019 at 18:29
To: Yaron Sheffer <yaronf.ietf@gmail.com>
Cc: Hannes Tschofenig <Hannes.Tschofenig@arm.com>, "rats@ietf.org" <rats@ietf.org>
Subject: Re: [Rats] EAT IANA registry

One of our thoughts is that EAT profiles will help with this. For example, a special profile for toasters might list 5 claims that must be included in every attestation and 10 claims that are optional and maybe even prohibit all others.

LL

On Nov 22, 2019, at 6:57 AM, Yaron Sheffer <yaronf.ietf@gmail.com> wrote:

Hi Hannes,

Looking at the JWT claim IANA registry [1], it is already a terrible mess of several different standards, obviously with many more coming. I guess what’s done is done, and I’ll take back my objection.

Thanks,

                Yaron

[1] https://www.iana.org/assignments/jwt/jwt.xhtml#claims

From: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
Date: Friday, November 22, 2019 at 14:17
To: Yaron Sheffer <yaronf.ietf@gmail.com>, "rats@ietf.org" <rats@ietf.org>
Subject: RE: EAT IANA registry

Yaron, 

Could you explain why you think that this is a good idea? 

Ciao

Hannes

From: RATS <rats-bounces@ietf.org> On Behalf Of Yaron Sheffer
Sent: Friday, November 22, 2019 2:05 PM
To: rats@ietf.org
Subject: [Rats] EAT IANA registry

Unrelated to my earlier mail, I would recommend to create a separate registry for EAT claims (I suppose that implies a nested object in the JWT/CWT) rather than to overload the CWT registry. Architecturally it just doesn’t jive to have all these claims as baseline CWT claims, and process-wise, it’s much more convenient for this group to control its own namespace.

Sorry if this has been raised before.

Thanks,

                Yaron

IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you. 

_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats