IETF Logo Mail Archive

Re: [stir] Last Call: <draft-ietf-stir-enhance-rfc8226-02.txt> (Enhanced JWT Claim Constraints for STIR Certificates) to Proposed Standard

Ben Campbell <ben@nostrum.com> Mon, 31 May 2021 18:35 UTC

Return-Path: <ben@nostrum.com>
X-Original-To: stir@ietfa.amsl.com
Delivered-To: stir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2F7663A21D0; Mon, 31 May 2021 11:35:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.435
X-Spam-Level:
X-Spam-Status: No, score=-0.435 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, KHOP_HELO_FCRDNS=0.398, MAY_BE_FORGED=0.846, T_SPF_HELO_PERMERROR=0.01, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=fail (1024-bit key) reason="fail (message has been altered)" header.d=nostrum.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aUIVH_R8t_u1; Mon, 31 May 2021 11:35:04 -0700 (PDT)
Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CC2E33A2210; Mon, 31 May 2021 11:35:03 -0700 (PDT)
Received: from smtpclient.apple (mta-70-120-133-87.satx.rr.com [70.120.133.87] (may be forged)) (authenticated bits=0) by nostrum.com (8.16.1/8.16.1) with ESMTPSA id 14VIYtgJ083759 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Mon, 31 May 2021 13:34:56 -0500 (CDT) (envelope-from ben@nostrum.com)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nostrum.com; s=default; t=1622486097; bh=2fAWFfOJzUPM4B0SyxUxU2ZKfV6yHXgXwAB2yp4OAYo=; h=Subject:From:In-Reply-To:Date:Cc:References:To; b=KSh3WSg0LSjlIv3SFdwzJpGL6T3y+hQ3nLvAYQ/JhNkN7OCTqd+rnNYw8JAFKyXcd 83XX0OUJQiBqmaygmsm8JglUholWJIwBtVm/9PSFhthwmUnt8rVv2z/rRn9zOIKf0N RTKQoW3j/XFjYkUSv1jqR8n5G59KbP65Ae4XItaI=
X-Authentication-Warning: raven.nostrum.com: Host mta-70-120-133-87.satx.rr.com [70.120.133.87] (may be forged) claimed to be smtpclient.apple
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.100.0.2.22\))
From: Ben Campbell <ben@nostrum.com>
In-Reply-To: <F8AEA9DA-C33C-4F55-9C5F-A074C208B679@vigilsec.com>
Date: Mon, 31 May 2021 13:34:50 -0500
Cc: Donald Eastlake <d3e3e3@gmail.com>, Last Call <last-call@ietf.org>, draft-ietf-stir-enhance-rfc8226@ietf.org, stir-chairs@ietf.org, IETF STIR Mail List <stir@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <4C04C1B5-CEB0-4BFD-979C-4BF00010CCE5@nostrum.com>
References: <162214803478.23177.107295775009225422@ietfa.amsl.com> <CAF4+nEFcmq0ha1nnY846dNbFa=nOFAUhS_bU0Ohbu2T21JkPag@mail.gmail.com> <F8AEA9DA-C33C-4F55-9C5F-A074C208B679@vigilsec.com>
To: Russ Housley <housley@vigilsec.com>
X-Mailer: Apple Mail (2.3654.100.0.2.22)
Archived-At: <https://mailarchive.ietf.org/arch/msg/stir/9kYQDpMweRCJXTbd540gikYO-EA>
Subject: Re: [stir] Last Call: <draft-ietf-stir-enhance-rfc8226-02.txt> (Enhanced JWT Claim Constraints for STIR Certificates) to Proposed Standard
X-BeenThere: stir@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Secure Telephone Identity Revisited <stir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/stir>, <mailto:stir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/stir/>
List-Post: <mailto:stir@ietf.org>
List-Help: <mailto:stir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/stir>, <mailto:stir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 31 May 2021 18:35:18 -0000

JSON is marked as well-known in the RFC editor’s abbreviation list. JWT is not.

OTOH, there’s no harm in expanding well-known abbreviations ;-)

Ben.

> On May 31, 2021, at 1:22 PM, Russ Housley <housley@vigilsec.com> wrote:
> 
> Sure.  JSON Web Token (JWT).  Do you think that JSON needs expanded too?
> 
> Russ
> 
> 
>> On May 31, 2021, at 1:58 PM, Donald Eastlake <d3e3e3@gmail.com> wrote:
>> 
>> How about expanding "JWT" in the abstract and on first use in the body
>> of this document.
>> 
>> Thanks,
>> Donald
>> ===============================
>> Donald E. Eastlake 3rd   +1-508-333-2270 (cell)
>> 2386 Panoramic Circle, Apopka, FL 32703 USA
>> d3e3e3@gmail.com
>> 
>> On Thu, May 27, 2021 at 4:41 PM The IESG <iesg-secretary@ietf.org> wrote:
>>> 
>>> 
>>> The IESG has received a request from the Secure Telephone Identity Revisited
>>> WG (stir) to consider the following document: - 'Enhanced JWT Claim
>>> Constraints for STIR Certificates'
>>> <draft-ietf-stir-enhance-rfc8226-02.txt> as Proposed Standard
>>> 
>>> The IESG plans to make a decision in the next few weeks, and solicits final
>>> comments on this action. Please send substantive comments to the
>>> last-call@ietf.org mailing lists by 2021-06-10. Exceptionally, comments may
>>> be sent to iesg@ietf.org instead. In either case, please retain the beginning
>>> of the Subject line to allow automated sorting.
>>> 
>>> Abstract
>>> 
>>> 
>>>  RFC 8226 provides a certificate extension to constrain the JWT claims
>>>  that can be included in the PASSporT as defined in RFC 8225.  If the
>>>  signer includes a JWT claim outside the constraint boundaries, then
>>>  the recipient will reject the entire PASSporT.  This document defines
>>>  an additional way that the JWT claims can be constrained.
>>> 
>>> 
>>> 
>>> 
>>> The file can be obtained via
>>> https://datatracker.ietf.org/doc/draft-ietf-stir-enhance-rfc8226/
>>> 
>>> 
>>> 
>>> No IPR declarations have been submitted directly on this I-D.
>>> 
>>> 
>>> 
>>> 
>>> 
>>> _______________________________________________
>>> IETF-Announce mailing list
>>> IETF-Announce@ietf.org
>>> https://www.ietf.org/mailman/listinfo/ietf-announce
>> 
>> _______________________________________________
>> stir mailing list
>> stir@ietf.org
>> https://www.ietf.org/mailman/listinfo/stir
>

v2.23.0 | Report a Bug | By Email