Re: [Rats] I-D: draft-rundgren-cote-00

Anders Rundgren <> Thu, 21 July 2022 08:11 UTC

Return-Path: <>
Received: from localhost (localhost []) by (Postfix) with ESMTP id B2915C157B45 for <>; Thu, 21 Jul 2022 01:11:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -2.11
X-Spam-Status: No, score=-2.11 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, NICE_REPLY_A=-0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: (amavisd-new); dkim=pass (2048-bit key)
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id JJoyOD3fr8nQ for <>; Thu, 21 Jul 2022 01:11:32 -0700 (PDT)
Received: from ( [IPv6:2a00:1450:4864:20::434]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by (Postfix) with ESMTPS id 11AA2C14CF18 for <>; Thu, 21 Jul 2022 01:11:32 -0700 (PDT)
Received: by with SMTP id bv24so1126709wrb.3 for <>; Thu, 21 Jul 2022 01:11:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=20210112; h=message-id:date:mime-version:user-agent:subject:content-language:to :cc:references:from:in-reply-to:content-transfer-encoding; bh=0RVSlAj1OzCltIK92BcH0oqslOEor6qALdMVytlWDmI=; b=QBWt63uYpTxp77iUjy7/NjsDCni3Z3B7ZIXlpEmxGTlQb6NwUetj9yCH55Spnk3pGF ydf9yqHQ0le8yaQKyIjtONBStKFXi7YwDCPfwd0SoMuQL9dRRGd4GGu3/HtMM5i8JgIQ lJB27gBCWfMuLDK2Hz6SZcwEwEUJtVfLZ7pye3RPohvdPsAxLRYcXyRFa39HKvlx0ZyW Z6VtaL3r6JEjX6JZSkIPa0ZwURQjvsz6hLrO93LJ0RRVNpnM6Yn8H+viEfgCdLc0p1u2 YH6sdFUZZskvdf3Lt7300bf+iN4FmNF192HA13VGyyCD5jnXCyE7Uu0fS2yKnolUotrU JuTg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=20210112; h=x-gm-message-state:message-id:date:mime-version:user-agent:subject :content-language:to:cc:references:from:in-reply-to :content-transfer-encoding; bh=0RVSlAj1OzCltIK92BcH0oqslOEor6qALdMVytlWDmI=; b=AueEfoEKpXrg55EQV+qPaE9tdug4tlvaib6PkEvDkWl+NquezoO0qGUVwozUv4PONB cYifoI8vbBmzwAt5VgcLuVJU0MZ5y9Cp5J2kH6Kmf6KCXjC76tSpPo//bzJCrdQyyskn zETuLBVwhWJ5DsX1G4GrPk2AqJruvjy2cbViMXKvpU3TNxw0onwUyLQdGa/ECpe+aIc8 unkdzoXe01rXVz0SqG843K2RpnB7BA3zDFxOttZZGTcprZFiac5vypMD2PzWOti4R+jw LLNC0SC6uSvD/R4JyAhFCS/6qmDrH9TwO7S0jXNLQQkx2qyRKvENoY5l1LkxAwPTdjsl bpvA==
X-Gm-Message-State: AJIora+DlsH19hz8qiY8DMARxDBBuJZMfBHP6/xGl+G9VqDp4wS7fH+b VYtenmcvKNrHq7hbh8Z98RAIPN0sURc=
X-Google-Smtp-Source: AGRyM1uLJdevc0Phx6VTJWE3Z0CjQulivIMgjU1kxDjRJg2jNCnMvJrnSzX0UqOIzaxPBn+iiLrofw==
X-Received: by 2002:a05:6000:1110:b0:21d:ea73:a47e with SMTP id z16-20020a056000111000b0021dea73a47emr20790479wrw.82.1658391090533; Thu, 21 Jul 2022 01:11:30 -0700 (PDT)
Received: from ?IPV6:2a01:e34:ec4e:5670:5cd3:7291:3d36:5830? ([2a01:e34:ec4e:5670:5cd3:7291:3d36:5830]) by with ESMTPSA id l7-20020a05600c4f0700b003a310fe1d75sm5565769wmq.38.2022. (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 21 Jul 2022 01:11:30 -0700 (PDT)
Message-ID: <>
Date: Thu, 21 Jul 2022 10:11:28 +0200
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.11.0
Content-Language: en-US
To: Thomas Fossati <>, Laurence Lundblade <>, henk Birkholz <>
Cc: "" <>
References: <> <> <> <> <> <> <1663483.1658345550@dooku> <> <>
From: Anders Rundgren <>
In-Reply-To: <>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: <>
Subject: Re: [Rats] I-D: draft-rundgren-cote-00
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Remote ATtestation procedureS <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Thu, 21 Jul 2022 08:11:33 -0000

On 2022-07-21 8:56, Thomas Fossati wrote:
> Hi Anders,

Hi Thomas,
comments in line.

> On Thu, Jul 21, 2022 at 6:09 AM Anders Rundgren
> <> wrote:
>> On 2022-07-20 21:32, Michael Richardson wrote:
>>>> The primary purpose is to enable developers defining community- or
>>>> application-specific type identifiers without having to go through an IANA
>>>> registration process. Although the scheme imposes no restrictions on type
>>>> identifiers (beyond being valid CBOR data items), using URLs should due to
>>>> their ubiquity be a candidate for CBOR based standards.
>>> I'm not sure I understand why RATS is on the CC.
>> Well, the RATS WG is just about to adopt an entirely different CBOR object typing scheme :)
>  From a quick glance, there seems to be substantial difference in scope
> between the two: one proposes a bunch of media types for EAT, the
> other an alternative typing system for CBOR.

As we all know there are almost always alternatives to achieving a specific goal.
Alternatives typically also come with different pros and cons.  FWIW, I try to evaluate the pros and cons of different approaches although the "weight" of each feature remains a thorny issue because it tends to be pretty subjective :)

In this case my assumption is that the overarching goal is providing an object typing mechanism permitting a common receiver dispatching the handling of received objects to different processors depending on their type.

This is something I have worked with since 20Y+ back based on object-integral typing-schemes like XML Schema, and more recently with JSON.  Adding such a feature to CBOR was a no-brainer.

In RATS it appears that you are currently dealing with not less than three different typing systems (media types, CBOR tags, profile URLs) which (in my simple mind...) feels slightly over the top.

I wouldn't completely ignore the fact that FIDO adopted the object-integral typing concept for attestations:


> Echoing Michael, I am not sure this is directly in scope for RATS.
> And with regards to its applicability to EAT, it seems to lack a bit
> of generality as it only addresses the CBOR side of the EAT coin.
> cheers, thanks