Re: [stir] WGLC: draft-ietf-stir-passport-rcd-09

[Jack Rickard <[e-mail]>]

Comments:
Section 9.1: Is the "iss" claim meaning specified anywhere else? This part reads like it is referencing some existing behaviour but I am unable to find anything defining it. I ask because this doesn't feel like it should be specific to this standard and would be useful for, for example, RPH where the cert identifies the source of the prioritisation.

Section 9.1: "the value of "iss" however MUST reflect the Subject Name field" is unclear, the "MUST" is very strong but the "reflect" very vague, should it equal it? If so in what format? I'm also not sure why this is useful, you will already have the subject name of the certificate, as you have to have the certificate to verify the signature.

Section 10: How should the passport indicate the relationship of the generator of the PASSporT to the caller? In the first party case I think you've left this entirely unspecified, and in the third party case that is not how "iss" was defined in the previous section, and it isn't clear how you would go from a third party organisation name to their relationship with the caller.

Section 5.1.5: The example isn't a valid base64 string (due to the # and *), as JWT's use the URL safe variant of base64 encoding with no padding, it would be useful to clarify here which flavour of base64 encoding is being used.

Nits:
Section 6: I believe "The value of "rcd" is an array of JSON objects" is wrong here, it's a JSON object containing the "name" field, etc.

Section 8: The phrase "potential values of the "rcd" array" is also wrong, this isn't an array, something like "potential fields in the "rcd" claim" would be clearer.

Section 11.1: the example identity here isn't valid, I think it should have ".." preceeding the PASSport and no trailing "=".

Thanks,
Jack

-----Original Message-----
From: stir <[e-mail]> On Behalf Of Robert Sparks
Sent: 08 December 2020 21:31
To: [e-mail]
Subject: [stir] WGLC: draft-ietf-stir-passport-rcd-09

NOTE: Message is from an external sender

This is a WGLC for draft-ietf-stir-passport-rcd-09.

Please send reviews to the list by the end of day 22 Dec 2020.

If you plan to provide a review but need more time, please let us know early.

See <https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fdraft-ietf-stir-passport-rcd%2F&amp;data=04%7C01%7Cjack.rickard%40metaswitch.com%7C19f85464b15848e0637d08d89bc098dd%7C9d9e56ebf6134ddbb27bbfcdf14b2cdb%7C1%7C0%7C637430598808552589%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&amp;sdata=8Zz%2B%2BN10JP6zy4jaozXYqMqRwOdE%2BD1Om7A8Xr7SPMc%3D&amp;reserved=0>

RjS

_______________________________________________
stir mailing list
[e-mail]
https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Fstir&amp;data=04%7C01%7Cjack.rickard%40metaswitch.com%7C19f85464b15848e0637d08d89bc098dd%7C9d9e56ebf6134ddbb27bbfcdf14b2cdb%7C1%7C0%7C637430598808552589%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&amp;sdata=UmjwL7Iy4LKkqdwlMD%2Fwlmbyl5ZvhqIM7ysOkO9Gnlc%3D&amp;reserved=0