IETF Logo Mail Archive

Re: [stir] PASSporT extensions: order of claims

"Politz, Ken" <Kenneth.Politz@team.neustar> Tue, 13 March 2018 21:35 UTC

Return-Path: <prvs=061016b909=kenneth.politz@team.neustar>
X-Original-To: stir@ietfa.amsl.com
Delivered-To: stir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 56DDD120713 for <stir@ietfa.amsl.com>; Tue, 13 Mar 2018 14:35:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.01
X-Spam-Level:
X-Spam-Status: No, score=-0.01 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=1.989, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=team.neustar
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RqmE7CiP0gDG for <stir@ietfa.amsl.com>; Tue, 13 Mar 2018 14:35:32 -0700 (PDT)
Received: from mx0b-0018ba01.pphosted.com (mx0a-0018ba01.pphosted.com [67.231.149.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8B437120454 for <stir@ietf.org>; Tue, 13 Mar 2018 14:35:32 -0700 (PDT)
Received: from pps.filterd (m0078664.ppops.net [127.0.0.1]) by mx0a-0018ba01.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w2DLXmh8029818; Tue, 13 Mar 2018 17:35:28 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=team.neustar; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=selector1; bh=AZRrWUBnjHxDQUv+YdjvLSbixGx0+ClEwMjKSSMNO8I=; b=dwcg9VOT0M0B9TfWOMsXVxWns3lwmZGazG1rYwcYQWTjxsvhAFCnzsrQb677Yw9aMTdh sL8+SVpL2KKRfU2h4qUK88UgiT4NLP4wA0QVT16XShB/xVOoJjYtnm3AUmiz3xVo+qnK xKO9MvHQMfP/vb1PtY0eci+UXvNnB8+3QykjBel4Y6PKp7X8T9VRAYfFvzN9lRJmTkc8 UXgtD0C4SN+ITL4ddIC7N0xCXp8paHZVaulcczItJZ/FSw6qhG1uiGlPdiObAkcvneDd BvYWSZqDSnJCszZ3+C5GNP2f7TQybUOrMJ00SUTJMw8AvH5H3IK6wXyNXTZ32wb2EfbH /g==
Received: from stntexhc10.cis.neustar.com ([156.154.17.216]) by mx0a-0018ba01.pphosted.com with ESMTP id 2gmaw34uet-1 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT); Tue, 13 Mar 2018 17:35:28 -0400
Received: from STNTEXMB13.cis.neustar.com ([169.254.3.141]) by stntexhc10.cis.neustar.com ([10.31.58.69]) with mapi id 14.03.0279.002; Tue, 13 Mar 2018 17:35:26 -0400
From: "Politz, Ken" <Kenneth.Politz@team.neustar>
To: Christer Holmberg <christer.holmberg@ericsson.com>, Chris Wendt <chris-ietf@chriswendt.net>
CC: "stir@ietf.org" <stir@ietf.org>, "adam@nostrum.com" <adam@nostrum.com>
Thread-Topic: [stir] PASSporT extensions: order of claims
Thread-Index: AQHTuvvKLoGLTt5520aG5ALLxR8fX6POigGAgABOTgCAABsrQA==
Date: Tue, 13 Mar 2018 21:35:25 +0000
Message-ID: <46946849EEFF3043A8FBCC3D102A2C1A3FCAE30D@stntexmb13.cis.neustar.com>
References: <7594FB04B1934943A5C02806D1A2204B6C1D17C1@ESESSMB109.ericsson.se> <7594FB04B1934943A5C02806D1A2204B6C1D1804@ESESSMB109.ericsson.se> <8B0E0275-68BD-41E9-B128-589F13C06D66@chriswendt.net> <7594FB04B1934943A5C02806D1A2204B6C2007A0@ESESSMB109.ericsson.se> <46946849EEFF3043A8FBCC3D102A2C1A3FCADE50@stntexmb13.cis.neustar.com> <7594FB04B1934943A5C02806D1A2204B6C200A0A@ESESSMB109.ericsson.se>
In-Reply-To: <7594FB04B1934943A5C02806D1A2204B6C200A0A@ESESSMB109.ericsson.se>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.96.9.94]
Content-Type: multipart/alternative; boundary="_000_46946849EEFF3043A8FBCC3D102A2C1A3FCAE30Dstntexmb13cisne_"
MIME-Version: 1.0
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2018-03-13_09:, , signatures=0
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1711220000 definitions=main-1803130240
Archived-At: <https://mailarchive.ietf.org/arch/msg/stir/VzrZSKQAlC3EamMC43jt_V-SdMo>
X-Mailman-Approved-At: Tue, 13 Mar 2018 14:50:44 -0700
Subject: Re: [stir] PASSporT extensions: order of claims
X-BeenThere: stir@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Secure Telephone Identity Revisited <stir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/stir>, <mailto:stir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/stir/>
List-Post: <mailto:stir@ietf.org>
List-Help: <mailto:stir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/stir>, <mailto:stir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 13 Mar 2018 21:35:34 -0000

That, I can’t answer ☺

From: Christer Holmberg [mailto:christer.holmberg@ericsson.com]
Sent: Tuesday, March 13, 2018 3:58 PM
To: Politz, Ken <Kenneth.Politz@team.neustar>; Chris Wendt <chris-ietf@chriswendt.net>
Cc: stir@ietf.org; adam@nostrum.com
Subject: Re: [stir] PASSporT extensions: order of claims

Hi,

>Try RFC 8225, Section 9, perhaps?

Ok, so if that’s a generic rule, why the statement saying that PASSporT extensions must specify the order?

Regards,

Christer

From: Christer Holmberg [mailto:christer.holmberg@ericsson.com]
Sent: Tuesday, March 13, 2018 2:47 PM
To: Chris Wendt <chris-ietf@chriswendt.net<mailto:chris-ietf@chriswendt.net>>
Cc: stir@ietf.org<mailto:stir@ietf.org>; adam@nostrum.com<mailto:adam@nostrum.com>
Subject: Re: [stir] PASSporT extensions: order of claims

Hi,

>I would agree with the text, the only caveat i would point out is that the extension definition has
>no choice to the order other than alphabetic order, so the order is essentially implied.  So, it’s sort
>of a technicality that maybe we didn’t anticipate, but i think technically you are correct.

Not sure I understand the has-no-choice part. Where is it said that the claims must be ordered in alphabetic order? We could for sure specify it that way, but based on your e-mail it seems like it is already specified somewhere?

Regards,

Christer


On Mar 10, 2018, at 8:27 AM, Christer Holmberg <christer.holmberg@ericsson.com<mailto:christer.holmberg@ericsson.com>> wrote:

Section 8.3 of RFC 8225, that is.

From: stir [mailto:stir-bounces@ietf.org] On Behalf Of Christer Holmberg
Sent: 10 March 2018 15:26
To: stir@ietf.org<mailto:stir@ietf.org>
Cc: adam@nostrum.com<mailto:adam@nostrum.com>
Subject: [stir] PASSporT extensions: order of claims

Hi,

Section  says:

   “Specifications that define extensions to the PASSporT mechanism MUST
   explicitly specify what claims they include beyond the base set of
   claims from this document, the order in which they will appear,…”

When looking at the extensions we are currently working on:

draft-ietf-stir-rph-03
draft-ietf-stir-passport-shaken-01
draft-ietf-stir-passport-divert-02

…I don’t see anything about the order in any of the documents.

I think it would be good to have a dedicated “Order of claims” section, or something similar, in each extension specification.

When looking at the examples in the drafts above, it seems like even the base claims are in different orders. Not sure whether there is an explicit requirement that they need to be in order, thought.

Regards,

Christer


_______________________________________________
stir mailing list
stir@ietf.org<mailto:stir@ietf.org>
https://www.ietf.org/mailman/listinfo/stir<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_stir&d=DwMGaQ&c=MOptNlVtIETeDALC_lULrw&r=ww1S9BHEcpE4MMUbgGQrsoL-SK3UCGY33Koaj2h9zYw&m=_DBdmUKpkUAUVv120PuHoMt-TVtTuzOHsfFQdAWmeFs&s=yYY6kvNSlx7W84nXLfYP7n4PSH0S7Uiq3VK2FI6iwEU&e=>

v2.23.0 | Report a Bug | By Email