Re: [sacm] AD Review of draft-ietf-sacm-coswid-15

Carsten Bormann <cabo@tzi.org> Fri, 12 February 2021 15:20 UTC

Return-Path: <cabo@tzi.org>
X-Original-To: sacm@ietfa.amsl.com
Delivered-To: sacm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D65793A1667 for <sacm@ietfa.amsl.com>; Fri, 12 Feb 2021 07:20:31 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.919
X-Spam-Level:
X-Spam-Status: No, score=-1.919 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R_5vsFSnIMmQ for <sacm@ietfa.amsl.com>; Fri, 12 Feb 2021 07:20:27 -0800 (PST)
Received: from gabriel-vm-2.zfn.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 934D43A1657 for <sacm@ietf.org>; Fri, 12 Feb 2021 07:20:27 -0800 (PST)
Received: from [192.168.217.118] (p5089a828.dip0.t-ipconnect.de [80.137.168.40]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-vm-2.zfn.uni-bremen.de (Postfix) with ESMTPSA id 4Dccd55604zyjd; Fri, 12 Feb 2021 16:20:25 +0100 (CET)
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <c25873c6f6834d74a6bf7cf1c314bfad@cert.org>
Date: Fri, 12 Feb 2021 16:20:25 +0100
Cc: Jessica Fitzgerald-McKay <jmfmckay@gmail.com>, "<sacm@ietf.org>" <sacm@ietf.org>, Jessica Fitzgerald-McKay <jmfitz2@cyber.nsa.gov>, Henk Birkholz <henk.birkholz@sit.fraunhofer.de>, "Schmidt, Charles M." <cmschmidt@mitre.org>, "Waltermire, David A." <david.waltermire@nist.gov>
X-Mao-Original-Outgoing-Id: 634836025.126073-3467904b66f32a30f84b4465c2c036ed
Content-Transfer-Encoding: quoted-printable
Message-Id: <DD21CD76-E713-4EDC-880C-8DC98547A243@tzi.org>
References: <d2439fe599dd48508c7cedaed3be7764@cert.org> <CAM+R6NXLyOFm10omDFLKS=EGv6xq77r9+dVPFwY=CCAGuuWL8g@mail.gmail.com> <c25873c6f6834d74a6bf7cf1c314bfad@cert.org>
To: Roman Danyliw <rdd@cert.org>
X-Mailer: Apple Mail (2.3608.120.23.2.4)
Archived-At: <https://mailarchive.ietf.org/arch/msg/sacm/kQ9dXkhKHQJC82iFFFyoEf6WlwU>
Subject: Re: [sacm] AD Review of draft-ietf-sacm-coswid-15
X-BeenThere: sacm@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: SACM WG mail list <sacm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sacm>, <mailto:sacm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sacm/>
List-Post: <mailto:sacm@ietf.org>
List-Help: <mailto:sacm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sacm>, <mailto:sacm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 12 Feb 2021 15:20:32 -0000

On 2020-11-15, at 20:15, Roman Danyliw <rdd@cert.org> wrote:
> 
> 
> ** Section 2.9.4.  The date field here is a CDDL time type.  In SWID, the equivalent is a xs:date.  Wouldn't it be more appropriate to use a CDDL tstr here?
> [Update: I see you're tracking this and have a marker for it with [QUESTION: Is "time" a correct representation of XSD:date?]”

By now, we have RFC 8943, which defines two representations of calendar date:

   Tag:  1004
   Data Item:  UTF-8 text string
   Semantics:  [RFC3339] full-date string
   Reference:  RFC 8943

   Tag:  100 (ASCII 'd')
   Data Item:  Unsigned or negative integer
   Semantics:  Number of days since the epoch date 1970-01-01
   Reference:  RFC 8943

So tag 1004 is directly equivalent to xs:date’s XML text form, while tag 100 is a compact form of that that would be more appropriate for COSWID in my view.  
[Note that the conversion between the two is entirely based on the principles of the Gregorian calendar, it will not be messed with by politicians (and their desire to get a memorial monument by messing with time zones) or by the time-nuts and their leap seconds.]

               +==================+==============+=========+
               | Date             | Tag 1004     | Tag 100 |
               +==================+==============+=========+
               | October 9, 1940  | "1940-10-09" | -10676  |
               +------------------+--------------+---------+
               | December 8, 1980 | "1980-12-08" | 3994    |
               +------------------+--------------+---------+

                                  Table 1

As usual, we can import the definitions made in this RFC into other RFCs without necessarily using it *as a tag* (i.e., we can use a tag in unwrapped form, if desired).

Grüße, Carsten