Re: [Rats] Initiating WGLC for draft-ietf-rats-msg-wrap-03

I have a few additional comments:

In section 5, it may be worth calling out that the encoded CMWCollection is encoded as an OCTET STRING as the extnValue field of this extension. Section 4.2 in RFC5280 makes this point but I’ve seen the outer OCTET STRING left out in a couple of attestation-related contexts. The pseudo code about removing “the ASN.1 OCTET STRING” in Section 3.3. could further this misimpression since there are two OCTET STRING layers wrapping a CBOR value. Maybe add something like: “The DER encoded CMWCollection is the value of the octet string for the extnValue field of the extension”.
The security considerations section says that “messages themselves and their encoding ensure security protection.” This is not true for UCCS, which is part of the referenced EAT media type spec.
I think this came up relative to the collections draft a while back but I forget how it was handled (and did not go looking just now). How would one encode artifacts that use different encoding types, i.e., a CBOR evidence and a JSON result? The collection concept is analogous to the submodules part of EAT, and that addresses the various nesting possibilities.

From: RATS <rats-bounces@ietf.org> on behalf of "Nancy Cam-Winget (ncamwing)" <ncamwing=40cisco.com@dmarc.ietf.org>
Date: Saturday, February 3, 2024 at 10:50 AM
To: "rats@ietf.org" <rats@ietf.org>
Subject: [Rats] Initiating WGLC for draft-ietf-rats-msg-wrap-03

Hello RATS participants,

There have been a few comments and several updates to draft-ietf-rats-msg-wrap-03.

We are going to initiate a first WGLC to assess its maturity for publication and get more feedback.

Thanks to Carl Wallace and Tom Jones for their prior feedback, can you please let us know if your

Comments are address in this latest draft and believe it is ready for publication?

We also need a few others to comment on the draft especially on maturity and readiness for

Publication.  The end of this WGLC is Feb. 23, 2024.

Best, Nancy

_______________________________________________ RATS mailing list RATS@ietf.org https://www.ietf.org/mailman/listinfo/rats 