IETF Logo Mail Archive

Re: [T2TRG] RESTful Design & Security

Carsten Bormann <cabo@tzi.org> Wed, 08 March 2017 09:44 UTC

Return-Path: <cabo@tzi.org>
X-Original-To: t2trg@ietfa.amsl.com
Delivered-To: t2trg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F0DA912943F for <t2trg@ietfa.amsl.com>; Wed, 8 Mar 2017 01:44:14 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level:
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id goY2Sux6TcmF for <t2trg@ietfa.amsl.com>; Wed, 8 Mar 2017 01:44:14 -0800 (PST)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AA023129431 for <T2TRG@irtf.org>; Wed, 8 Mar 2017 01:44:13 -0800 (PST)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id v289h5pQ027289; Wed, 8 Mar 2017 10:43:05 +0100 (CET)
Received: from eduroam-cart-clients-173.wlan.uni-bremen.de (eduroam-cart-clients-173.wlan.uni-bremen.de [134.102.145.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3vdT9533mtzDJ1q; Wed, 8 Mar 2017 10:43:05 +0100 (CET)
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 10.2 \(3259\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <24aded2f-738f-2518-ccc3-9a21eec5d879@gmx.net>
Date: Wed, 08 Mar 2017 10:43:04 +0100
X-Mao-Original-Outgoing-Id: 510658984.289594-e0c2c7061e560aa2d98161f00a560cae
Content-Transfer-Encoding: quoted-printable
Message-Id: <BFB2C8F0-0E60-4560-8FC8-761F46CB1A89@tzi.org>
References: <c15a387f-9dd3-987e-2901-b86fd8f60108@gmx.net> <10144.1488908366@obiwan.sandelman.ca> <952c4a16-174f-2457-1f11-8f733e738f90@gmx.net> <4EBB3DDD0FBF694CA2A87838DF129B3C01AA2F98@DEFTHW99EL4MSX.ww902.siemens.net> <558bae1a-ff84-9fb3-c6bf-021f492e9a04@gmx.net> <4EBB3DDD0FBF694CA2A87838DF129B3C01AA313F@DEFTHW99EL4MSX.ww902.siemens.net> <0216378E-8976-4D4E-A307-AEE5FD00BDA6@GE.com> <24aded2f-738f-2518-ccc3-9a21eec5d879@gmx.net>
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>
X-Mailer: Apple Mail (2.3259)
Archived-At: <https://mailarchive.ietf.org/arch/msg/t2trg/g4cRWX2FabcnIQrscPXCUItoTE0>
Cc: Michael Richardson <mcr+ietf@sandelman.ca>, "Simpson, Robby (GE Energy Connections)" <robby.simpson@ge.com>, "T2TRG@irtf.org" <T2TRG@irtf.org>, "Kovatsch, Matthias" <matthias.kovatsch@siemens.com>
Subject: Re: [T2TRG] RESTful Design & Security
X-BeenThere: t2trg@irtf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "IRTF Thing-to-Thing \(T2T\) Research-Group-in-creation" <t2trg.irtf.org>
List-Unsubscribe: <https://www.irtf.org/mailman/options/t2trg>, <mailto:t2trg-request@irtf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/t2trg/>
List-Post: <mailto:t2trg@irtf.org>
List-Help: <mailto:t2trg-request@irtf.org?subject=help>
List-Subscribe: <https://www.irtf.org/mailman/listinfo/t2trg>, <mailto:t2trg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Wed, 08 Mar 2017 09:44:15 -0000

On 8 Mar 2017, at 10:25, Hannes Tschofenig <hannes.tschofenig@gmx.net> wrote:
> 
> why JOSE/COSE isn’t applicable

JOSE/COSE is generally applicable to the problem space.

The specific draft mentioned additionally undertakes to do some streaming integrity, where partially delivered messages can already be authenticated as such.  Compare the ongoing discussion of block-wise transfer for OSCOAP.

Grüße, Carsten

v2.23.0 | Report a Bug | By Email