Hi Mike, the text of -09 is not yet in the repository, so I made a pull request to the state of main in https://github.com/tplooker/draft-ietf-cose-cwt-claims-in-headers:
https://github.com/tplooker/draft-ietf-cose-cwt-claims-in-headers/pull/14 This PR avoids the nebulous term profile introduced in -09. It also makes the requirement for indicating the intended interpretation a protocol requirement, instead of burying it in the security considerations. It is explicit that it is the security (integrity protection and authentication) of the *combination* of the CWT Claims header parameter and of the method of conveying the intended interpretation governs the allowable usage of the interpreted information. Grüße, Carsten > On 2023-11-14, at 19:09, Michael Jones <[email protected]> wrote: > > Hi Francesca, > > Now that we have an agreed-upon strategy in which the lake-edhoc and > draft-ietf-cose-cwt-claims-in-headers header parameters are distinct, can you > please reply-all updating your review to approve the registration? That > should put us in good shape for the November 30th Telechat. > > FYI, Hannes replied updating his IoTDir review saying that the spec is ready > - which he did in response to the security considerations updates we made > together in > https://www.ietf.org/archive/id/draft-ietf-cose-cwt-claims-in-headers-09.html. > > Carsten, in response to your feedback, -09 now also says that the profile > used defines the semantics for the CWT claims used. > > Thanks both, > -- Mike > > -----Original Message----- > From: COSE <[email protected]> On Behalf Of Michael Jones > Sent: Thursday, November 9, 2023 3:54 AM > To: Carsten Bormann <[email protected]> > Cc: Francesca Palombini <[email protected]>; > [email protected]; lgl island-resort.com <[email protected]>; > [email protected]; [email protected] > Subject: Re: [COSE] [IANA #1284212] expert review for > draft-ietf-cose-cwt-claims-in-headers (cose) > > I created > https://github.com/tplooker/draft-ietf-cose-cwt-claims-in-headers/pull/13 to > describe the non-CBOR payload use case in response to Hannes' IotDir review. > It also says that profiles define the semantics of the claims used, in > response to further feedback from Carsten. > > Reviews requested! > > -- Mike > > -----Original Message----- > From: Carsten Bormann <[email protected]> > Sent: Wednesday, November 8, 2023 11:46 AM > To: Michael Jones <[email protected]> > Cc: Francesca Palombini <[email protected]>; > [email protected]; lgl island-resort.com <[email protected]>; > [email protected]; [email protected] > Subject: Re: [COSE] [IANA #1284212] expert review for > draft-ietf-cose-cwt-claims-in-headers (cose) > > Hi Mike, > > I was planning to send you (a PR with) some clarifying editorial changes > first. > The week is quite full... > > Grüße, Carsten > > >> On Nov 8, 2023, at 00:29, Michael Jones <[email protected]> wrote: >> >> As designated experts, can you please reply-all saying that you approve of >> the registration proposed in >> https://www.ietf.org/archive/id/draft-ietf-cose-cwt-claims-in-headers-08.html > > > _______________________________________________ > COSE mailing list > [email protected] > https://www.ietf.org/mailman/listinfo/cose _______________________________________________ COSE mailing list [email protected] https://www.ietf.org/mailman/listinfo/cose
