While following our anima hackathon for draft-ietf-anima-constrained-voucher, i stumbled across not understanding some details. Maybe beside helping me understanding in this thread, some of these questions might also be good to be answered with better text in rfc8152bis.
My basic confusion is probably around the distinction between Syntax and Semantics. rfc8152(bis) specifies a couple of Media Types and CBOR IDs to characterize the COSE blob and calls this the Semantic. But the only semantic that is indicated by the items in Table 1/2 (cose-sign...cose-mac0) seems to be the semantic of the cose-type, but not the semantic of the content. Unfortunately, i don't know what outside of its use in our anima draft example contant types would be. As far as i could find, none of the examples in appendix C nor in https://github.com/cose-wg/Examples do have the "content type" (3:) field with a value and none seem to elaborate about different type of payloads. In practice, we do need to indiate in the Media Type of a COSE blob the semantic of the content and not only of the COSE "signing" semantics This is why we are wanting to register a Media Type of application/voucher-cose+cbor Now if our approach of asking for sucha media type to identify the cose content semantic and not only the cose function semantic is the correct approach, would i then not have o already find other media types for other ietf solutions using cose ? I can not find any other Media Types in the IANA registry though.. Are there any ongoing that have not asked for early allocation yet ? If my thinking is not correct, then it would be good to hear wha the correct approach is to designate a media type to uses of cose. Which brings me to the content type field. "Applications SHOULD provide this header parameter if the content structure is potentially ambiguous" I would like to understand an example when the content structure is and when it is not ambiguous. And of course, for the content type field, there is again the question whether it should indicate only the syntax of the payload (CBOR) or the semantic+syntax... And an answer of "COSE doesn't care, its up to the user of COSE" is fine, but any such guidance would be helpfull to have in rfc8152bis for adopters of COSE (such as us). Thanks! Toerless _______________________________________________ COSE mailing list [email protected] https://www.ietf.org/mailman/listinfo/cose
