From turners@ieca.com Mon Jun 3 10:41:38 2013 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5AF7B21F87CD for ; Mon, 3 Jun 2013 10:41:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -100.965 X-Spam-Level: X-Spam-Status: No, score=-100.965 tagged_above=-999 required=5 tests=[AWL=-1.300, BAYES_50=0.001, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1B844KQUZMXt for ; Mon, 3 Jun 2013 10:41:24 -0700 (PDT) Received: from pechora7.dc.icann.org (pechora7.icann.org [IPv6:2620:0:2830:201::1:73]) by ietfa.amsl.com (Postfix) with ESMTP id 9453C21F91B7 for ; Mon, 3 Jun 2013 10:36:08 -0700 (PDT) Received: from gateway16.websitewelcome.com (gateway16.websitewelcome.com [69.93.82.10]) by pechora7.dc.icann.org (8.13.8/8.13.8) with ESMTP id r53HZl31009783 for ; Mon, 3 Jun 2013 17:36:08 GMT Received: by gateway16.websitewelcome.com (Postfix, from userid 5007) id C48AA3CF16634; Mon, 3 Jun 2013 12:12:58 -0500 (CDT) Received: from gator1743.hostgator.com (gator1743.hostgator.com [184.173.253.227]) by gateway16.websitewelcome.com (Postfix) with ESMTP id 1F6703CF163B9 for ; Mon, 3 Jun 2013 12:12:58 -0500 (CDT) Received: from [173.73.135.101] (port=49991 helo=thunderfish.local) by gator1743.hostgator.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.80) (envelope-from ) id 1UjYJt-0000TC-8y for media-types@iana.org; Mon, 03 Jun 2013 12:13:21 -0500 Message-ID: <51ACCEB0.5070402@ieca.com> Date: Mon, 03 Jun 2013 13:13:20 -0400 From: Sean Turner User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:17.0) Gecko/20130509 Thunderbird/17.0.6 MIME-Version: 1.0 To: media-types@iana.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - gator1743.hostgator.com X-AntiAbuse: Original Domain - iana.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - ieca.com X-BWhitelist: no X-Source: X-Source-Args: X-Source-Dir: X-Source-Sender: (thunderfish.local) [173.73.135.101]:49991 X-Source-Auth: sean.turner@ieca.com X-Email-Count: 1 X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IxNzQzLmhvc3RnYXRvci5jb20= X-Greylist: Delayed for 00:22:04 by milter-greylist-4.2.3 (pechora7.dc.icann.org [192.0.46.73]); Mon, 03 Jun 2013 17:36:08 +0000 (UTC) X-Mailman-Approved-At: Sat, 08 Jun 2013 09:52:31 -0700 Subject: [media-types] review requested: draft-turner-application-cms-media-type X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Jun 2013 17:41:38 -0000 I'd like to request an expert review for the application/cms media type registration found in: http://tools.ietf.org/html/draft-turner-application-cms-media-type Thanks, spt From turners@ieca.com Mon Jun 10 07:37:38 2013 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B728D21F8FF3 for ; Mon, 10 Jun 2013 07:37:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.203 X-Spam-Level: X-Spam-Status: No, score=-102.203 tagged_above=-999 required=5 tests=[AWL=0.062, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PQXhbyvKuTvU for ; Mon, 10 Jun 2013 07:37:33 -0700 (PDT) Received: from pechora1.lax.icann.org (unknown [IPv6:2620:0:2d0:201::1:71]) by ietfa.amsl.com (Postfix) with ESMTP id B8D6921F8F6E for ; Mon, 10 Jun 2013 07:37:33 -0700 (PDT) Received: from gateway15.websitewelcome.com (gateway15.websitewelcome.com [69.56.144.13]) by pechora1.lax.icann.org (8.13.8/8.13.8) with ESMTP id r5AEbDEJ030613 for ; Mon, 10 Jun 2013 14:37:33 GMT Received: by gateway15.websitewelcome.com (Postfix, from userid 5007) id 60B10943FFB12; Mon, 10 Jun 2013 09:11:44 -0500 (CDT) Received: from gator1743.hostgator.com (gator1743.hostgator.com [184.173.253.227]) by gateway15.websitewelcome.com (Postfix) with ESMTP id 51A40943FFAD4 for ; Mon, 10 Jun 2013 09:11:44 -0500 (CDT) Received: from [173.73.135.101] (port=63076 helo=thunderfish.local) by gator1743.hostgator.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.80) (envelope-from ) id 1Um2oy-00086o-2w for media-types@iana.org; Mon, 10 Jun 2013 09:11:44 -0500 Message-ID: <51B5DE9F.3000702@ieca.com> Date: Mon, 10 Jun 2013 10:11:43 -0400 From: Sean Turner User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:17.0) Gecko/20130509 Thunderbird/17.0.6 MIME-Version: 1.0 To: media-types@iana.org References: <51ACCEB0.5070402@ieca.com> In-Reply-To: <51ACCEB0.5070402@ieca.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - gator1743.hostgator.com X-AntiAbuse: Original Domain - iana.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - ieca.com X-BWhitelist: no X-Source: X-Source-Args: X-Source-Dir: X-Source-Sender: (thunderfish.local) [173.73.135.101]:63076 X-Source-Auth: sean.turner@ieca.com X-Email-Count: 7 X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IxNzQzLmhvc3RnYXRvci5jb20= X-Greylist: Delayed for 00:25:08 by milter-greylist-4.0 (pechora1.lax.icann.org [192.0.33.71]); Mon, 10 Jun 2013 14:37:33 +0000 (UTC) X-Mailman-Approved-At: Wed, 12 Jun 2013 23:00:03 -0700 Subject: Re: [media-types] review requested: draft-turner-application-cms-media-type X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Jun 2013 14:37:38 -0000 In case I'm just supposed to sending the template: spt ------ Type name: application Subtype name: cms Required parameters: None. Optional parameters: encapsulatedContent=y; where y is one or more CMS ECT (Encapsulating Content Types); multiple values are encapsulated in quotes and separated by a folding-whitespace comma folding- whitespace. ECT values are based on content types found in [RFC3274], [RFC4073], [RFC5083], [RFC5652], and [RFC6032]. This list can later be extended see Section 3. authData compressedData contentCollection contentInfo contentWithAttrs authEnvelopedData encryptedKeyPkg digestData encryptedData envelopedData signedData innerContent=x; where x is one or more CMS ICT (Inner Content Types); multiple values encapsulated in quotes and are separated by a folding-whitespace comma folding-whitespace. ICT values are based on content types found in [RFC4108], [RFC5914], [RFC5958], [RFC6031], and [ID.housley-keypackage-receipt-n-error]. This list can later be extended see Section 3. firmwarePackage firmwareLoadReceipt firmwareLoadError aKeyPackage sKeyPackage trustAnchorList keyPackageReceipt keyPackageError id-data [RFC5652] MUST NOT be used if it is the only inner content listed and the data is MIME content; when id-data is used to encapsulate MIME, the media type application/pkcs7-mime media type defined in [RFC5751] SHOULD be used. The optional parameters are case-sensitive. Encoding considerations: Binary. [RFC5652] requires that the outer most encapsulation be ContentInfo. Security considerations: See [RFC3370], [RFC5652], [RFC5753], and [RFC5754] for id- signedData, id-envelopedData, id-digestData, id-encryptedData, id- ct-authData; see [RFC5958], [RFC5959], and [RFC6162] for id-ct-KP- aKeyPackage; see [RFC6031] and [RFC6160] for id-ct-KP- sKeyPackage; see [RFC6032], [RFC6033], and [RFC6161] for id-ct-KP- encryptedKeyPkg; see [RFC5914] for id-ct-trustAnchorList; see [RFC3274] for id-compressedData; see [RFC5083] and [RFC5084] for id-ct-authEnvelopedData; see [RFC4073] for id-ct-contentCollection and id-ct-contentWithAttrs; see [RFC4108] for id-ct- firmwarePackage, id-ct-firmwareLoadReceipt, id-ct- firmwareLoadError; see [ID.housley-keypackage-receipt-n-error] for id-ct-KP-keyPackageReceipt and id-ct-KP-keyPackageError. Interoperability considerations: See [RFC3274], [RFC4073], [RFC4108], [RFC5083], [RFC5652], [RFC5914], [RFC5958], [RFC6031], [RFC6032], and [ID.housley- keypackage-receipt-n-error]. In all cases, CMS content types are encapsulated within ContentInfo structures [RFC5652]; that is the outer most enveloping structure is ContentInfo. When processing a SignedData around any of the inner content type the [RFC5652] validation rules MUST be used. The PKCS #7 [RFC2315] validation rules MUST NOT be used. Published specification: This specification. Applications which use this media type: Applications that support CMS (Cryptographic Message Syntax) content types. Additional information: Magic number(s): None File extension(s): .cms Macintosh File Type Code(s): Person & email address to contact for further information: Sean Turner Restrictions on usage: none Author: Sean Turner Intended usage: COMMON Change controller: The IESG On 6/3/13 1:13 PM, Sean Turner wrote: > I'd like to request an expert review for the application/cms media type > registration found in: > http://tools.ietf.org/html/draft-turner-application-cms-media-type > > Thanks, > > spt From turners@ieca.com Mon Jun 10 08:23:09 2013 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2995121F9704 for ; Mon, 10 Jun 2013 08:23:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.209 X-Spam-Level: X-Spam-Status: No, score=-102.209 tagged_above=-999 required=5 tests=[AWL=0.056, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zxYu1Ot4-kli for ; Mon, 10 Jun 2013 08:23:04 -0700 (PDT) Received: from pechora3.lax.icann.org (pechora3.icann.org [IPv6:2620:0:2d0:201::1:73]) by ietfa.amsl.com (Postfix) with ESMTP id 3E6E421F96F5 for ; Mon, 10 Jun 2013 08:23:01 -0700 (PDT) Received: from gateway01.websitewelcome.com (gateway01.websitewelcome.com [69.41.242.19]) by pechora3.lax.icann.org (8.13.8/8.13.8) with ESMTP id r5AFMf9w030808 for ; Mon, 10 Jun 2013 15:23:01 GMT Received: by gateway01.websitewelcome.com (Postfix, from userid 5007) id 44AFB2042ACC8; Mon, 10 Jun 2013 09:57:58 -0500 (CDT) Received: from gator1743.hostgator.com (gator1743.hostgator.com [184.173.253.227]) by gateway01.websitewelcome.com (Postfix) with ESMTP id 3604F2042AC5A for ; Mon, 10 Jun 2013 09:57:58 -0500 (CDT) Received: from [173.73.135.101] (port=63167 helo=thunderfish.local) by gator1743.hostgator.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.80) (envelope-from ) id 1Um3Xh-0003Ae-Uq; Mon, 10 Jun 2013 09:57:58 -0500 Message-ID: <51B5E975.4010204@ieca.com> Date: Mon, 10 Jun 2013 10:57:57 -0400 From: Sean Turner User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:17.0) Gecko/20130509 Thunderbird/17.0.6 MIME-Version: 1.0 To: media-types@iana.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - gator1743.hostgator.com X-AntiAbuse: Original Domain - iana.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - ieca.com X-BWhitelist: no X-Source: X-Source-Args: X-Source-Dir: X-Source-Sender: (thunderfish.local) [173.73.135.101]:63167 X-Source-Auth: sean.turner@ieca.com X-Email-Count: 20 X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IxNzQzLmhvc3RnYXRvci5jb20= X-Greylist: IP, sender and recipient auto-whitelisted, not delayed by milter-greylist-4.0 (pechora3.lax.icann.org [192.0.33.73]); Mon, 10 Jun 2013 15:23:01 +0000 (UTC) X-Mailman-Approved-At: Wed, 12 Jun 2013 23:00:03 -0700 Cc: draft-ietf-pkix-est.all@tools.ietf.org, app-ads@tools.ietf.org Subject: [media-types] Registration of MIME media type application/csrattrs X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Jun 2013 15:23:09 -0000 Please review the following application/csrattrs media type request which is documented in: https://datatracker.ietf.org/doc/draft-ietf-pkix-est/ The document is currently in IETF LC. Thanks, spt --- Type name: application Subtype name: csrattrs Required parameters: None Optional parameters: None Encoding considerations: binary; Security Considerations: Clients request a list of attributes that servers wish to be in certification requests. The request/response SHOULD be done in a TLS-protected tunnel. Interoperability considerations: None Published specification: This memo. Applications which use this media type: Enrollment over Secure Transport (EST) Additional information: Magic number(s): None File extension: None Macintosh File Type Code(s): Person & email address to contact for further information: Dan Harkins Restrictions on usage: None Author: Dan Harkins Intended usage: COMMON Change controller: The IESG From turners@ieca.com Mon Jun 10 08:52:36 2013 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3DBD621F962D for ; Mon, 10 Jun 2013 08:52:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.213 X-Spam-Level: X-Spam-Status: No, score=-102.213 tagged_above=-999 required=5 tests=[AWL=0.052, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QT2d7q66HXRK for ; Mon, 10 Jun 2013 08:52:27 -0700 (PDT) Received: from pechora7.dc.icann.org (pechora7.icann.org [IPv6:2620:0:2830:201::1:73]) by ietfa.amsl.com (Postfix) with ESMTP id 9186421F9811 for ; Mon, 10 Jun 2013 08:52:22 -0700 (PDT) Received: from gateway02.websitewelcome.com (gateway02.websitewelcome.com [69.56.170.20]) by pechora7.dc.icann.org (8.13.8/8.13.8) with ESMTP id r5AFq2cf001417 for ; Mon, 10 Jun 2013 15:52:22 GMT Received: by gateway02.websitewelcome.com (Postfix, from userid 5007) id C543771EA08E4; Mon, 10 Jun 2013 09:58:13 -0500 (CDT) Received: from gator1743.hostgator.com (gator1743.hostgator.com [184.173.253.227]) by gateway02.websitewelcome.com (Postfix) with ESMTP id B26BF71EA08AA for ; Mon, 10 Jun 2013 09:58:13 -0500 (CDT) Received: from [173.73.135.101] (port=63168 helo=thunderfish.local) by gator1743.hostgator.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.80) (envelope-from ) id 1Um3Y3-0003Ij-TM; Mon, 10 Jun 2013 09:58:19 -0500 Message-ID: <51B5E98A.50404@ieca.com> Date: Mon, 10 Jun 2013 10:58:18 -0400 From: Sean Turner User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:17.0) Gecko/20130509 Thunderbird/17.0.6 MIME-Version: 1.0 To: media-types@iana.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - gator1743.hostgator.com X-AntiAbuse: Original Domain - iana.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - ieca.com X-BWhitelist: no X-Source: X-Source-Args: X-Source-Dir: X-Source-Sender: (thunderfish.local) [173.73.135.101]:63168 X-Source-Auth: sean.turner@ieca.com X-Email-Count: 23 X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IxNzQzLmhvc3RnYXRvci5jb20= X-Greylist: Delayed for 00:29:38 by milter-greylist-4.2.3 (pechora7.dc.icann.org [192.0.46.73]); Mon, 10 Jun 2013 15:52:22 +0000 (UTC) X-Mailman-Approved-At: Wed, 12 Jun 2013 23:00:03 -0700 Cc: draft-ietf-pkix-est.all@tools.ietf.org, app-ads@tools.ietf.org Subject: [media-types] Update of MIME media type application/pkcs7-mime Registration X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Jun 2013 15:52:42 -0000 Please review the following update to application/pkcs7-mime media type request which is documented in: https://datatracker.ietf.org/doc/draft-ietf-pkix-est/ It adds an optional smime-type parameter. The document is currently in IETF LC. Thanks, spt --- The application/pkcs7-mime content type defines the optional "smime- type" parameter [RFC5751]. The smime-type parameter for Server-side Key Generation Response is server-generated-key. smime-type name: server-generated-key Required parameters: None Optional parameters: None Encoding considerations: binary; Security Considerations: Clients request a server provided key. The request/response SHOULD be done in a TLS-protected tunnel. Interoperability considerations: None Published specification: This memo. Applications which use this media type: Enrollment over Secure Transport (EST) Additional information: Magic number(s): None File extension: None Macintosh File Type Code(s): Person & email address to contact for further information: Max Pritikin Restrictions on usage: None Author: Max Pritikin Intended usage: COMMON Change controller: The IESG From derhoermi@gmx.net Thu Jun 13 03:35:13 2013 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E340721F99CF for ; Thu, 13 Jun 2013 03:35:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.524 X-Spam-Level: X-Spam-Status: No, score=-2.524 tagged_above=-999 required=5 tests=[AWL=0.075, BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DS-oaQZcwHGR for ; Thu, 13 Jun 2013 03:35:09 -0700 (PDT) Received: from pechora1.lax.icann.org (unknown [IPv6:2620:0:2d0:201::1:71]) by ietfa.amsl.com (Postfix) with ESMTP id 6B41521F99B3 for ; Thu, 13 Jun 2013 03:35:09 -0700 (PDT) Received: from mout.gmx.net (mout.gmx.net [212.227.15.18]) by pechora1.lax.icann.org (8.13.8/8.13.8) with ESMTP id r5DAYmff032482 for ; Thu, 13 Jun 2013 10:35:08 GMT Received: from mailout-de.gmx.net ([10.1.76.34]) by mrigmx.server.lan (mrigmx002) with ESMTP (Nemesis) id 0MP3Jh-1Uk4rQ0Q2p-006Lp7 for ; Thu, 13 Jun 2013 12:34:47 +0200 Received: (qmail invoked by alias); 13 Jun 2013 10:34:46 -0000 Received: from p5B233947.dip0.t-ipconnect.de (EHLO netb.Speedport_W_700V) [91.35.57.71] by mail.gmx.net (mp034) with SMTP; 13 Jun 2013 12:34:46 +0200 X-Authenticated: #723575 X-Provags-ID: V01U2FsdGVkX18j0y5wXeEjA44TV6eNApsMc8R4AEj7tYFjFdJ8FT 94EwbOqqKUGNzR From: Bjoern Hoehrmann To: Sean Turner Date: Thu, 13 Jun 2013 12:34:48 +0200 Message-ID: References: <51ACCEB0.5070402@ieca.com> <51B5DE9F.3000702@ieca.com> In-Reply-To: <51B5DE9F.3000702@ieca.com> X-Mailer: Forte Agent 3.3/32.846 MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Y-GMX-Trusted: 0 X-Greylist: IP, sender and recipient auto-whitelisted, not delayed by milter-greylist-4.0 (pechora1.lax.icann.org [192.0.33.71]); Thu, 13 Jun 2013 10:35:09 +0000 (UTC) Cc: media-types@iana.org Subject: Re: [media-types] review requested: draft-turner-application-cms-media-type X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Jun 2013 10:35:14 -0000 * Sean Turner wrote: >In case I'm just supposed to sending the template: >Optional parameters: > > encapsulatedContent=y; where y is one or more CMS ECT > (Encapsulating Content Types); multiple values are encapsulated in > quotes and separated by a folding-whitespace comma folding- > whitespace. ECT values are based on content types found in > [RFC3274], [RFC4073], [RFC5083], [RFC5652], and [RFC6032]. This > list can later be extended see Section 3. I think the first "ECT" should be "ECTs"; I can't parse the part after the semicolon. There should probably be a comma before "see". Same for the next parameter. >Security considerations: > > See [RFC3370], [RFC5652], [RFC5753], and [RFC5754] for id- > signedData, id-envelopedData, id-digestData, id-encryptedData, id- > ct-authData; see [RFC5958], [RFC5959], and [RFC6162] for id-ct-KP- > aKeyPackage; see [RFC6031] and [RFC6160] for id-ct-KP- sKeyPackage; > see [RFC6032], [RFC6033], and [RFC6161] for id-ct-KP- > encryptedKeyPkg; see [RFC5914] for id-ct-trustAnchorList; see > [RFC3274] for id-compressedData; see [RFC5083] and [RFC5084] for > id-ct-authEnvelopedData; see [RFC4073] for id-ct-contentCollection > and id-ct-contentWithAttrs; see [RFC4108] for id-ct- > firmwarePackage, id-ct-firmwareLoadReceipt, id-ct- > firmwareLoadError; see [ID.housley-keypackage-receipt-n-error] for > id-ct-KP-keyPackageReceipt and id-ct-KP-keyPackageError. Editorially the above is quite horrible, maybe a table to map the values to the RFCs would be better. Also, there should be some prose to set the context here (why would one "see" all the referenced documents, and why are there no security considerations for the type right here, beyond the suggestion to look elsewhere). -- Björn Höhrmann · mailto:bjoern@hoehrmann.de · http://bjoern.hoehrmann.de Am Badedeich 7 · Telefon: +49(0)160/4415681 · http://www.bjoernsworld.de 25899 Dagebüll · PGP Pub. KeyID: 0xA4357E78 · http://www.websitedev.de/ From derhoermi@gmx.net Thu Jun 13 03:39:54 2013 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C606221F994C for ; Thu, 13 Jun 2013 03:39:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.532 X-Spam-Level: X-Spam-Status: No, score=-2.532 tagged_above=-999 required=5 tests=[AWL=0.067, BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4-9of0KEu7m8 for ; Thu, 13 Jun 2013 03:39:50 -0700 (PDT) Received: from pechora1.lax.icann.org (unknown [IPv6:2620:0:2d0:201::1:71]) by ietfa.amsl.com (Postfix) with ESMTP id 1634821F992A for ; Thu, 13 Jun 2013 03:39:50 -0700 (PDT) Received: from mout.gmx.net (mout.gmx.net [212.227.15.18]) by pechora1.lax.icann.org (8.13.8/8.13.8) with ESMTP id r5DAdT9C001193 for ; Thu, 13 Jun 2013 10:39:49 GMT Received: from mailout-de.gmx.net ([10.1.76.34]) by mrigmx.server.lan (mrigmx001) with ESMTP (Nemesis) id 0Lhhfz-1U0Feb27hx-00mpsy for ; Thu, 13 Jun 2013 12:39:28 +0200 Received: (qmail invoked by alias); 13 Jun 2013 10:39:27 -0000 Received: from p5B233947.dip0.t-ipconnect.de (EHLO netb.Speedport_W_700V) [91.35.57.71] by mail.gmx.net (mp034) with SMTP; 13 Jun 2013 12:39:27 +0200 X-Authenticated: #723575 X-Provags-ID: V01U2FsdGVkX18oweAaCgQoDU5ByvUNztItTnTSBQRtoYjyba8TCB uL9vMO7YW1Lwp4 From: Bjoern Hoehrmann To: Sean Turner Date: Thu, 13 Jun 2013 12:39:27 +0200 Message-ID: References: <51B5E975.4010204@ieca.com> In-Reply-To: <51B5E975.4010204@ieca.com> X-Mailer: Forte Agent 3.3/32.846 MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Y-GMX-Trusted: 0 X-Greylist: IP, sender and recipient auto-whitelisted, not delayed by milter-greylist-4.0 (pechora1.lax.icann.org [192.0.33.71]); Thu, 13 Jun 2013 10:39:49 +0000 (UTC) Cc: media-types@iana.org, draft-ietf-pkix-est.all@tools.ietf.org, app-ads@tools.ietf.org Subject: Re: [media-types] Registration of MIME media type application/csrattrs X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Jun 2013 10:39:54 -0000 * Sean Turner wrote: >Type name: application > >Subtype name: csrattrs > >Required parameters: None > >Optional parameters: None > >Encoding considerations: binary; No need for a semicolon here. >Applications which use this media type: Enrollment over Secure >Transport (EST) I think it would be nice to have at least a proper sentence here. >Author: Dan Harkins > >Intended usage: COMMON > >Change controller: The IESG I note that for application/cms you have "The IESG " instead. -- Björn Höhrmann · mailto:bjoern@hoehrmann.de · http://bjoern.hoehrmann.de Am Badedeich 7 · Telefon: +49(0)160/4415681 · http://www.bjoernsworld.de 25899 Dagebüll · PGP Pub. KeyID: 0xA4357E78 · http://www.websitedev.de/ From derhoermi@gmx.net Thu Jun 13 03:47:30 2013 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E03A321F9A46 for ; Thu, 13 Jun 2013 03:47:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.539 X-Spam-Level: X-Spam-Status: No, score=-2.539 tagged_above=-999 required=5 tests=[AWL=0.060, BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oJQUZuwbdQPd for ; Thu, 13 Jun 2013 03:47:26 -0700 (PDT) Received: from pechora1.lax.icann.org (unknown [IPv6:2620:0:2d0:201::1:71]) by ietfa.amsl.com (Postfix) with ESMTP id 77EDC21F9A45 for ; Thu, 13 Jun 2013 03:47:26 -0700 (PDT) Received: from mout.gmx.net (mout.gmx.net [212.227.17.20]) by pechora1.lax.icann.org (8.13.8/8.13.8) with ESMTP id r5DAl5dE003509 for ; Thu, 13 Jun 2013 10:47:26 GMT Received: from mailout-de.gmx.net ([10.1.76.1]) by mrigmx.server.lan (mrigmx001) with ESMTP (Nemesis) id 0M5rJ1-1UOZ1d22n3-00xvgS for ; Thu, 13 Jun 2013 12:47:04 +0200 Received: (qmail invoked by alias); 13 Jun 2013 10:47:03 -0000 Received: from p5B233947.dip0.t-ipconnect.de (EHLO netb.Speedport_W_700V) [91.35.57.71] by mail.gmx.net (mp001) with SMTP; 13 Jun 2013 12:47:03 +0200 X-Authenticated: #723575 X-Provags-ID: V01U2FsdGVkX18gTacuciYg7T6+EM4cgUSo0ilxFRlNHVR17xXhNu /DyOy6eMY6pVG7 From: Bjoern Hoehrmann To: Sean Turner Date: Thu, 13 Jun 2013 12:47:04 +0200 Message-ID: References: <51B5E98A.50404@ieca.com> In-Reply-To: <51B5E98A.50404@ieca.com> X-Mailer: Forte Agent 3.3/32.846 MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Y-GMX-Trusted: 0 X-Greylist: IP, sender and recipient auto-whitelisted, not delayed by milter-greylist-4.0 (pechora1.lax.icann.org [192.0.33.71]); Thu, 13 Jun 2013 10:47:26 +0000 (UTC) Cc: media-types@iana.org, draft-ietf-pkix-est.all@tools.ietf.org, app-ads@tools.ietf.org Subject: Re: [media-types] Update of MIME media type application/pkcs7-mime Registration X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Jun 2013 10:47:31 -0000 * Sean Turner wrote: >The application/pkcs7-mime content type defines the optional "smime- >type" parameter [RFC5751]. The smime-type parameter for Server-side >Key Generation Response is server-generated-key. > >smime-type name: server-generated-key > >Required parameters: None This should be preceded by Type name: application Subtype name: pkcs7-mime If this is supposed to register the application/pkcs7-mime type. But it seems to me that using the media type registration template here is not correct, I would rather expect "Updates: 5751" and then simply defining the additional smime-type parameter, no need for the template. -- Björn Höhrmann · mailto:bjoern@hoehrmann.de · http://bjoern.hoehrmann.de Am Badedeich 7 · Telefon: +49(0)160/4415681 · http://www.bjoernsworld.de 25899 Dagebüll · PGP Pub. KeyID: 0xA4357E78 · http://www.websitedev.de/ From turners@ieca.com Thu Jun 13 06:14:13 2013 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6BFAC21F9ABA for ; Thu, 13 Jun 2013 06:14:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.152 X-Spam-Level: X-Spam-Status: No, score=-102.152 tagged_above=-999 required=5 tests=[AWL=0.113, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TE7Cp-MPqxYV for ; Thu, 13 Jun 2013 06:14:07 -0700 (PDT) Received: from pechora8.dc.icann.org (pechora8.icann.org [IPv6:2620:0:2830:201::1:74]) by ietfa.amsl.com (Postfix) with ESMTP id 2225B21F9AB7 for ; Thu, 13 Jun 2013 06:13:53 -0700 (PDT) Received: from gateway14.websitewelcome.com (gateway14.websitewelcome.com [69.93.154.35]) by pechora8.dc.icann.org (8.13.8/8.13.8) with ESMTP id r5DDDWIR004858 for ; Thu, 13 Jun 2013 13:13:52 GMT Received: by gateway14.websitewelcome.com (Postfix, from userid 5007) id D5391557E1981; Thu, 13 Jun 2013 08:13:26 -0500 (CDT) Received: from gator1743.hostgator.com (gator1743.hostgator.com [184.173.253.227]) by gateway14.websitewelcome.com (Postfix) with ESMTP id C599F557E193A for ; Thu, 13 Jun 2013 08:13:26 -0500 (CDT) Received: from [173.73.135.101] (port=57543 helo=thunderfish.local) by gator1743.hostgator.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.80) (envelope-from ) id 1Un7LH-0003sG-LO; Thu, 13 Jun 2013 08:13:31 -0500 Message-ID: <51B9C57A.4010804@ieca.com> Date: Thu, 13 Jun 2013 09:13:30 -0400 From: Sean Turner User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:17.0) Gecko/20130509 Thunderbird/17.0.6 MIME-Version: 1.0 To: Bjoern Hoehrmann References: <51ACCEB0.5070402@ieca.com> <51B5DE9F.3000702@ieca.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - gator1743.hostgator.com X-AntiAbuse: Original Domain - iana.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - ieca.com X-BWhitelist: no X-Source: X-Source-Args: X-Source-Dir: X-Source-Sender: (thunderfish.local) [173.73.135.101]:57543 X-Source-Auth: sean.turner@ieca.com X-Email-Count: 1 X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IxNzQzLmhvc3RnYXRvci5jb20= X-Greylist: IP, sender and recipient auto-whitelisted, not delayed by milter-greylist-4.2.3 (pechora8.dc.icann.org [192.0.46.74]); Thu, 13 Jun 2013 13:13:52 +0000 (UTC) Cc: media-types@iana.org Subject: Re: [media-types] review requested: draft-turner-application-cms-media-type X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Jun 2013 13:14:13 -0000 On 6/13/13 6:34 AM, Bjoern Hoehrmann wrote: > * Sean Turner wrote: >> In case I'm just supposed to sending the template: >> Optional parameters: >> >> encapsulatedContent=y; where y is one or more CMS ECT >> (Encapsulating Content Types); multiple values are encapsulated in >> quotes and separated by a folding-whitespace comma folding- >> whitespace. ECT values are based on content types found in >> [RFC3274], [RFC4073], [RFC5083], [RFC5652], and [RFC6032]. This >> list can later be extended see Section 3. > > I think the first "ECT" should be "ECTs"; I can't parse the part after > the semicolon. There should probably be a comma before "see". Same for > the next parameter. Fixed. >> Security considerations: >> >> See [RFC3370], [RFC5652], [RFC5753], and [RFC5754] for id- >> signedData, id-envelopedData, id-digestData, id-encryptedData, id- >> ct-authData; see [RFC5958], [RFC5959], and [RFC6162] for id-ct-KP- >> aKeyPackage; see [RFC6031] and [RFC6160] for id-ct-KP- sKeyPackage; >> see [RFC6032], [RFC6033], and [RFC6161] for id-ct-KP- >> encryptedKeyPkg; see [RFC5914] for id-ct-trustAnchorList; see >> [RFC3274] for id-compressedData; see [RFC5083] and [RFC5084] for >> id-ct-authEnvelopedData; see [RFC4073] for id-ct-contentCollection >> and id-ct-contentWithAttrs; see [RFC4108] for id-ct- >> firmwarePackage, id-ct-firmwareLoadReceipt, id-ct- >> firmwareLoadError; see [ID.housley-keypackage-receipt-n-error] for >> id-ct-KP-keyPackageReceipt and id-ct-KP-keyPackageError. > > Editorially the above is quite horrible, maybe a table to map the values > to the RFCs would be better. Also, there should be some prose to set the > context here (why would one "see" all the referenced documents, and why > are there no security considerations for the type right here, beyond the > suggestion to look elsewhere). These are a list of all the RFCs where these content types are defined plus the documents that define algorithms that can be used to protect the content types. There was one additional consideration in the draft that didn't end up in the template so how about: Security Considerations: The following security considerations apply: RFC | CMS Protecting Content Type and Algorithms ----------+------------------------------------------------- [RFC3370] | id-signedData, id-envelopedData, id-digestedData, [RFC5652] | id-encryptedData, and id-ct-authData [RFC5753] | [RFC5754] | ----------+------------------------------------------------- [RFC5958] | id-ct-KP-aKeyPackage [RFC5959] | [RFC6162] | ----------+------------------------------------------------- [RFC6031] | id-ct-KP-sKeyPackage [RFC6160] | ----------+------------------------------------------------- [RFC6032] | id-ct-KP-encryptedKeyPkg [RFC6033] | [RFC6161] | ----------+------------------------------------------------- [RFC5914] | id-ct-trustAnchorList ----------+------------------------------------------------- [RFC3274] | id-compressedData ----------+------------------------------------------------- [RFC5083] | id-ct-authEnvelopedData [RFC5084] | ----------+------------------------------------------------- [RFC4073] | id-ct-contentCollection and | id-ct-contentWithAttrs ----------+------------------------------------------------- [RFC4108] | id-ct-firmwarePackage, id-ct-firmwareLoadReceipt, | and id-ct-firmwareLoadError ----------+------------------------------------------------- [RFCTBD] | id-ct-KP-keyPackageReceipt and | id-ct-KP-keyPackageError ----------+------------------------------------------------- In some circumstances, significant information can be leaked by disclosing what the innermost ASN.1 structure is. In these cases it is acceptable to disclose the wrappers without disclosing the inner content type. From turners@ieca.com Thu Jun 13 06:47:49 2013 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 627D421F9AC1 for ; Thu, 13 Jun 2013 06:47:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.156 X-Spam-Level: X-Spam-Status: No, score=-102.156 tagged_above=-999 required=5 tests=[AWL=0.109, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BaGRKVafMxV1 for ; Thu, 13 Jun 2013 06:47:43 -0700 (PDT) Received: from pechora1.lax.icann.org (unknown [IPv6:2620:0:2d0:201::1:71]) by ietfa.amsl.com (Postfix) with ESMTP id 113C421F946C for ; Thu, 13 Jun 2013 06:47:43 -0700 (PDT) Received: from gateway04.websitewelcome.com (gateway04.websitewelcome.com [67.18.14.8]) by pechora1.lax.icann.org (8.13.8/8.13.8) with ESMTP id r5DDlM7Q015776 for ; Thu, 13 Jun 2013 13:47:42 GMT Received: by gateway04.websitewelcome.com (Postfix, from userid 5007) id B805A78D13D91; Thu, 13 Jun 2013 08:21:44 -0500 (CDT) Received: from gator1743.hostgator.com (gator1743.hostgator.com [184.173.253.227]) by gateway04.websitewelcome.com (Postfix) with ESMTP id A92C078D13D1D for ; Thu, 13 Jun 2013 08:21:44 -0500 (CDT) Received: from [173.73.135.101] (port=57557 helo=thunderfish.local) by gator1743.hostgator.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.80) (envelope-from ) id 1Un7TP-0006k0-OA; Thu, 13 Jun 2013 08:21:55 -0500 Message-ID: <51B9C773.5000802@ieca.com> Date: Thu, 13 Jun 2013 09:21:55 -0400 From: Sean Turner User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:17.0) Gecko/20130509 Thunderbird/17.0.6 MIME-Version: 1.0 To: Bjoern Hoehrmann References: <51ACCEB0.5070402@ieca.com> <51B5DE9F.3000702@ieca.com> <51B9C57A.4010804@ieca.com> In-Reply-To: <51B9C57A.4010804@ieca.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - gator1743.hostgator.com X-AntiAbuse: Original Domain - iana.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - ieca.com X-BWhitelist: no X-Source: X-Source-Args: X-Source-Dir: X-Source-Sender: (thunderfish.local) [173.73.135.101]:57557 X-Source-Auth: sean.turner@ieca.com X-Email-Count: 3 X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IxNzQzLmhvc3RnYXRvci5jb20= X-Greylist: Delayed for 00:25:26 by milter-greylist-4.0 (pechora1.lax.icann.org [192.0.33.71]); Thu, 13 Jun 2013 13:47:42 +0000 (UTC) Cc: media-types@iana.org Subject: Re: [media-types] review requested: draft-turner-application-cms-media-type X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Jun 2013 13:47:49 -0000 Sorry hit send to fast. On 6/13/13 9:13 AM, Sean Turner wrote: > On 6/13/13 6:34 AM, Bjoern Hoehrmann wrote: >> * Sean Turner wrote: >>> In case I'm just supposed to sending the template: >>> Optional parameters: >>> >>> encapsulatedContent=y; where y is one or more CMS ECT >>> (Encapsulating Content Types); multiple values are encapsulated in >>> quotes and separated by a folding-whitespace comma folding- >>> whitespace. ECT values are based on content types found in >>> [RFC3274], [RFC4073], [RFC5083], [RFC5652], and [RFC6032]. This >>> list can later be extended see Section 3. >> >> I think the first "ECT" should be "ECTs"; I can't parse the part after >> the semicolon. There should probably be a comma before "see". Same for >> the next parameter. > > Fixed. The part after the semicolon is supposed to indicate how multiple values are carried. What I'd like is: value, value My understanding is that a , needs to go in between quotes hence: multiple values are encapsulated in quotes and separated by a folding-whitespace comma folding-whitespace. so if we had authData and compressedData it would be: ect="authData, compressedData" spt From turners@ieca.com Thu Jun 13 06:52:53 2013 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 314B221F9A99 for ; Thu, 13 Jun 2013 06:52:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.159 X-Spam-Level: X-Spam-Status: No, score=-102.159 tagged_above=-999 required=5 tests=[AWL=0.106, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nnK0tfRmPqa8 for ; Thu, 13 Jun 2013 06:52:47 -0700 (PDT) Received: from pechora1.lax.icann.org (unknown [IPv6:2620:0:2d0:201::1:71]) by ietfa.amsl.com (Postfix) with ESMTP id 0703621F9AE7 for ; Thu, 13 Jun 2013 06:52:44 -0700 (PDT) Received: from gateway15.websitewelcome.com (gateway15.websitewelcome.com [67.18.94.13]) by pechora1.lax.icann.org (8.13.8/8.13.8) with ESMTP id r5DDqNZi017013 for ; Thu, 13 Jun 2013 13:52:43 GMT Received: by gateway15.websitewelcome.com (Postfix, from userid 5007) id DC6969C86965F; Thu, 13 Jun 2013 07:51:36 -0500 (CDT) Received: from gator1743.hostgator.com (gator1743.hostgator.com [184.173.253.227]) by gateway15.websitewelcome.com (Postfix) with ESMTP id CF8609C86961B for ; Thu, 13 Jun 2013 07:51:36 -0500 (CDT) Received: from [173.73.135.101] (port=57528 helo=thunderfish.local) by gator1743.hostgator.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.80) (envelope-from ) id 1Un704-00028D-J2; Thu, 13 Jun 2013 07:51:36 -0500 Message-ID: <51B9C058.9060803@ieca.com> Date: Thu, 13 Jun 2013 08:51:36 -0400 From: Sean Turner User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:17.0) Gecko/20130509 Thunderbird/17.0.6 MIME-Version: 1.0 To: Bjoern Hoehrmann References: <51B5E98A.50404@ieca.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - gator1743.hostgator.com X-AntiAbuse: Original Domain - iana.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - ieca.com X-BWhitelist: no X-Source: X-Source-Args: X-Source-Dir: X-Source-Sender: (thunderfish.local) [173.73.135.101]:57528 X-Source-Auth: sean.turner@ieca.com X-Email-Count: 5 X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IxNzQzLmhvc3RnYXRvci5jb20= X-Greylist: Delayed for 00:33:23 by milter-greylist-4.0 (pechora1.lax.icann.org [192.0.33.71]); Thu, 13 Jun 2013 13:52:43 +0000 (UTC) Cc: media-types@iana.org, draft-ietf-pkix-est.all@tools.ietf.org, app-ads@tools.ietf.org Subject: Re: [media-types] Update of MIME media type application/pkcs7-mime Registration X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Jun 2013 13:52:53 -0000 On 6/13/13 6:47 AM, Bjoern Hoehrmann wrote: > * Sean Turner wrote: >> The application/pkcs7-mime content type defines the optional "smime- >> type" parameter [RFC5751]. The smime-type parameter for Server-side >> Key Generation Response is server-generated-key. >> >> smime-type name: server-generated-key >> >> Required parameters: None > > This should be preceded by > > Type name: application > > Subtype name: pkcs7-mime > > If this is supposed to register the application/pkcs7-mime type. But it > seems to me that using the media type registration template here is not > correct, I would rather expect "Updates: 5751" and then simply defining > the additional smime-type parameter, no need for the template. It's not registering application/pkcs7-mime is adding a parameter. If I understand correctly, if we added "Updates: 5751 (once approved)" to the header we could just omit the template completely? I'd argue that if we don't need the template that's great, but what's more important is that people be able to find these subtypes and the way to do that is to have them pointed to by the registry not the original document. How about if we just omit the template and ask IANA to *also* point to this document from the application/pkcs7-mime registry? spt From turners@ieca.com Thu Jun 13 06:53:57 2013 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BB5C521F9B0F for ; Thu, 13 Jun 2013 06:53:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.162 X-Spam-Level: X-Spam-Status: No, score=-102.162 tagged_above=-999 required=5 tests=[AWL=0.103, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q+zbho0DN4fN for ; Thu, 13 Jun 2013 06:53:51 -0700 (PDT) Received: from pechora1.lax.icann.org (unknown [IPv6:2620:0:2d0:201::1:71]) by ietfa.amsl.com (Postfix) with ESMTP id 2CA5A21F9AD8 for ; Thu, 13 Jun 2013 06:53:39 -0700 (PDT) Received: from gateway15.websitewelcome.com (gateway15.websitewelcome.com [67.18.94.13]) by pechora1.lax.icann.org (8.13.8/8.13.8) with ESMTP id r5DDrJiT017069 for ; Thu, 13 Jun 2013 13:53:39 GMT Received: by gateway15.websitewelcome.com (Postfix, from userid 5007) id 7A8169C880199; Thu, 13 Jun 2013 07:54:22 -0500 (CDT) Received: from gator1743.hostgator.com (gator1743.hostgator.com [184.173.253.227]) by gateway15.websitewelcome.com (Postfix) with ESMTP id 6A0119C88014E for ; Thu, 13 Jun 2013 07:54:22 -0500 (CDT) Received: from [173.73.135.101] (port=57542 helo=thunderfish.local) by gator1743.hostgator.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.80) (envelope-from ) id 1Un72k-0003qs-6d; Thu, 13 Jun 2013 07:54:22 -0500 Message-ID: <51B9C0FD.2030006@ieca.com> Date: Thu, 13 Jun 2013 08:54:21 -0400 From: Sean Turner User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:17.0) Gecko/20130509 Thunderbird/17.0.6 MIME-Version: 1.0 To: Bjoern Hoehrmann References: <51B5E975.4010204@ieca.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - gator1743.hostgator.com X-AntiAbuse: Original Domain - iana.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - ieca.com X-BWhitelist: no X-Source: X-Source-Args: X-Source-Dir: X-Source-Sender: (thunderfish.local) [173.73.135.101]:57542 X-Source-Auth: sean.turner@ieca.com X-Email-Count: 9 X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IxNzQzLmhvc3RnYXRvci5jb20= X-Greylist: IP, sender and recipient auto-whitelisted, not delayed by milter-greylist-4.0 (pechora1.lax.icann.org [192.0.33.71]); Thu, 13 Jun 2013 13:53:39 +0000 (UTC) Cc: media-types@iana.org, draft-ietf-pkix-est.all@tools.ietf.org, app-ads@tools.ietf.org Subject: Re: [media-types] Registration of MIME media type application/csrattrs X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Jun 2013 13:53:57 -0000 On 6/13/13 6:39 AM, Bjoern Hoehrmann wrote: > * Sean Turner wrote: >> Type name: application >> >> Subtype name: csrattrs >> >> Required parameters: None >> >> Optional parameters: None >> >> Encoding considerations: binary; > > No need for a semicolon here. ack >> Applications which use this media type: Enrollment over Secure >> Transport (EST) > > I think it would be nice to have at least a proper sentence here. can do >> Author: Dan Harkins >> >> Intended usage: COMMON >> >> Change controller: The IESG > > I note that for application/cms you have "The IESG " > instead. Different authors. They'll change this up. Question: Do these changes need to made before we get the you've been approved message? spt From alexey.melnikov@isode.com Thu Jun 13 07:05:31 2013 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EBD1821F8BC0 for ; Thu, 13 Jun 2013 07:05:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.528 X-Spam-Level: X-Spam-Status: No, score=-103.528 tagged_above=-999 required=5 tests=[AWL=1.071, BAYES_00=-2.599, GB_I_LETTER=-2, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CSojT9Q4F2Y4 for ; Thu, 13 Jun 2013 07:05:26 -0700 (PDT) Received: from pechora5.dc.icann.org (unknown [IPv6:2620:0:2830:201::1:71]) by ietfa.amsl.com (Postfix) with ESMTP id 62A8821F930C for ; Thu, 13 Jun 2013 07:04:47 -0700 (PDT) Received: from waldorf.isode.com (waldorf.isode.com [62.3.217.251]) by pechora5.dc.icann.org (8.13.8/8.13.8) with ESMTP id r5DE4PTA013430 for ; Thu, 13 Jun 2013 14:04:46 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1371132261; d=isode.com; s=selector; i=@isode.com; bh=lV7WB1r82E1l5/Yt6VEjV4uZfO9GEbDEU3zvNdZ6luo=; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version: In-Reply-To:References:Content-Type:Content-Transfer-Encoding: Content-ID:Content-Description; b=W/m7zZYE4bf/SGyJnMKIalosRzklWvIY/Nqn1woHsKd9WKoeRgEs6DXAeV8wjZU0bdvpHa AWwwO7M4ZN0swesuFThENgQZvFtJDrpE6nQ0+pvAP9ZCUKv585YD1BVHzaDCNqGwLQL76L SQb29Q0KDXFFRdQBGwZgF1Z7Ml6KA70=; Received: from [172.16.1.29] (shiny.isode.com [62.3.217.250]) by waldorf.isode.com (submission channel) via TCP with ESMTPA id ; Thu, 13 Jun 2013 15:04:20 +0100 Message-ID: <51B9D163.9090600@isode.com> Date: Thu, 13 Jun 2013 15:04:19 +0100 From: Alexey Melnikov User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:17.0) Gecko/20130509 Thunderbird/17.0.6 To: Sean Turner References: <51ACCEB0.5070402@ieca.com> <51B5DE9F.3000702@ieca.com> In-Reply-To: <51B5DE9F.3000702@ieca.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Greylist: IP, sender and recipient auto-whitelisted, not delayed by milter-greylist-4.0 (pechora5.dc.icann.org [192.0.46.71]); Thu, 13 Jun 2013 14:04:47 +0000 (UTC) Cc: media-types@iana.org Subject: Re: [media-types] review requested: draft-turner-application-cms-media-type X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Jun 2013 14:05:31 -0000 Hi Sean, On 10/06/2013 15:11, Sean Turner wrote: > Additional information: > > Magic number(s): None > File extension(s): .cms I would pick a different extension (possible a 4 letter one), unless .cms is already in use for this media type. http://filext.com/file-extension/CMS shows something else. From alexey.melnikov@isode.com Thu Jun 13 07:18:40 2013 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 482E521F9A6A for ; Thu, 13 Jun 2013 07:18:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.655 X-Spam-Level: X-Spam-Status: No, score=-102.655 tagged_above=-999 required=5 tests=[AWL=-0.056, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wJPlrb3Cz-9P for ; Thu, 13 Jun 2013 07:18:35 -0700 (PDT) Received: from pechora4.lax.icann.org (pechora4.icann.org [IPv6:2620:0:2d0:201::1:74]) by ietfa.amsl.com (Postfix) with ESMTP id C697C21F9A74 for ; Thu, 13 Jun 2013 07:18:34 -0700 (PDT) Received: from statler.isode.com (statler.isode.com [62.3.217.254]) by pechora4.lax.icann.org (8.13.8/8.13.8) with ESMTP id r5DEICeJ010514 for ; Thu, 13 Jun 2013 14:18:33 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1371133088; d=isode.com; s=selector; i=@isode.com; bh=Ycydv2F6NHC3E5Qhwyeuo5oVVxN++TCCH2y8AeLAQ0s=; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version: In-Reply-To:References:Content-Type:Content-Transfer-Encoding: Content-ID:Content-Description; b=co/Xpu8TsBTGZW8yGAQ7pOEh+U/UhZwtIh2oNwevRaqLSXUS4CFl7ZQ0GFbxcOiTsUfzI+ H//VmZm7+/EJplLGYdCSMBSAQjY13uia2JF/W/zVcFqSI4OXa8s8KLBuJWOx1WrWSngDIM vv8IkTg5W2bOLJNFJasVpGrILUyRYp4=; Received: from [172.16.1.29] (shiny.isode.com [62.3.217.250]) by statler.isode.com (submission channel) via TCP with ESMTPA id ; Thu, 13 Jun 2013 15:18:08 +0100 Message-ID: <51B9D49D.5000502@isode.com> Date: Thu, 13 Jun 2013 15:18:05 +0100 From: Alexey Melnikov User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:17.0) Gecko/20130509 Thunderbird/17.0.6 To: Sean Turner References: <51B5E98A.50404@ieca.com> <51B9C058.9060803@ieca.com> In-Reply-To: <51B9C058.9060803@ieca.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Greylist: IP, sender and recipient auto-whitelisted, not delayed by milter-greylist-4.0 (pechora4.lax.icann.org [192.0.33.74]); Thu, 13 Jun 2013 14:18:34 +0000 (UTC) Cc: Bjoern Hoehrmann , media-types@iana.org, draft-ietf-pkix-est.all@tools.ietf.org, app-ads@tools.ietf.org Subject: Re: [media-types] Update of MIME media type application/pkcs7-mime Registration X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Jun 2013 14:18:40 -0000 On 13/06/2013 13:51, Sean Turner wrote: > On 6/13/13 6:47 AM, Bjoern Hoehrmann wrote: >> * Sean Turner wrote: >>> The application/pkcs7-mime content type defines the optional "smime- >>> type" parameter [RFC5751]. The smime-type parameter for Server-side >>> Key Generation Response is server-generated-key. >>> >>> smime-type name: server-generated-key >>> >>> Required parameters: None >> >> This should be preceded by >> >> Type name: application >> >> Subtype name: pkcs7-mime >> >> If this is supposed to register the application/pkcs7-mime type. But it >> seems to me that using the media type registration template here is not >> correct, I would rather expect "Updates: 5751" and then simply defining >> the additional smime-type parameter, no need for the template. > > It's not registering application/pkcs7-mime is adding a parameter. If > I understand correctly, if we added "Updates: 5751 (once approved)" to > the header we could just omit the template completely? I'd argue that > if we don't need the template that's great, but what's more important > is that people be able to find these subtypes and the way to do that > is to have them pointed to by the registry not the original document. > How about if we just omit the template and ask IANA to *also* point to > this document from the application/pkcs7-mime registry? Sounds sensible to me. (But also see my other email). From alexey.melnikov@isode.com Thu Jun 13 07:25:23 2013 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 361DC21F9ADD for ; Thu, 13 Jun 2013 07:25:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.649 X-Spam-Level: X-Spam-Status: No, score=-102.649 tagged_above=-999 required=5 tests=[AWL=-0.050, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gfzWyXDXbLDL for ; Thu, 13 Jun 2013 07:25:21 -0700 (PDT) Received: from pechora7.dc.icann.org (pechora7.icann.org [IPv6:2620:0:2830:201::1:73]) by ietfa.amsl.com (Postfix) with ESMTP id 93D9C21F99A2 for ; Thu, 13 Jun 2013 07:25:15 -0700 (PDT) Received: from waldorf.isode.com (cl-125.lon-03.gb.sixxs.net [IPv6:2a00:14f0:e000:7c::2]) by pechora7.dc.icann.org (8.13.8/8.13.8) with ESMTP id r5DEOrNc013585 for ; Thu, 13 Jun 2013 14:25:14 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1371133492; d=isode.com; s=selector; i=@isode.com; bh=NPd4nOQJr/LINzbMtHuurbNC8bl7n+jNU7jso7Cez0s=; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version: In-Reply-To:References:Content-Type:Content-Transfer-Encoding: Content-ID:Content-Description; b=w225UHELjkF4bHwI+cVreHul4yW6Ed2PuaP3upezlpYCTbE7VyWhW7tLqo5rDRmO3KwR/G pM9WJw6xiGMZqDeqeuV4DKB6rm4KSaPAWeHIy6Mi2ORh1GmLq0rrLSpMnrbypvtyjmkFxm GsXcGYGEkxkaeKGrCwfJ/dskZ5/KQlk=; Received: from [172.16.1.29] (shiny.isode.com [62.3.217.250]) by waldorf.isode.com (submission channel) via TCP with ESMTPA id ; Thu, 13 Jun 2013 15:24:51 +0100 Message-ID: <51B9D632.7020503@isode.com> Date: Thu, 13 Jun 2013 15:24:50 +0100 From: Alexey Melnikov User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:17.0) Gecko/20130509 Thunderbird/17.0.6 To: Sean Turner References: <51B5E98A.50404@ieca.com> In-Reply-To: <51B5E98A.50404@ieca.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Greylist: IP, sender and recipient auto-whitelisted, not delayed by milter-greylist-4.2.3 (pechora7.dc.icann.org [IPv6:2620:0:2830:201::1:73]); Thu, 13 Jun 2013 14:25:14 +0000 (UTC) Cc: media-types@iana.org, draft-ietf-pkix-est.all@tools.ietf.org, app-ads@tools.ietf.org Subject: Re: [media-types] Update of MIME media type application/pkcs7-mime Registration X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Jun 2013 14:25:23 -0000 On 10/06/2013 15:58, Sean Turner wrote: > Please review the following update to application/pkcs7-mime media > type request which is documented in: > https://datatracker.ietf.org/doc/draft-ietf-pkix-est/ > It adds an optional smime-type parameter. > The document is currently in IETF LC. [...] > Additional information: > > Magic number(s): None > File extension: None .p7m ? > Macintosh File Type Code(s): From turners@ieca.com Thu Jun 13 07:49:29 2013 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 473FA21F997F for ; Thu, 13 Jun 2013 07:49:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.165 X-Spam-Level: X-Spam-Status: No, score=-102.165 tagged_above=-999 required=5 tests=[AWL=0.100, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oxqFClH1aM-p for ; Thu, 13 Jun 2013 07:49:23 -0700 (PDT) Received: from pechora1.lax.icann.org (unknown [IPv6:2620:0:2d0:201::1:71]) by ietfa.amsl.com (Postfix) with ESMTP id C3A7121F9974 for ; Thu, 13 Jun 2013 07:49:22 -0700 (PDT) Received: from gateway13.websitewelcome.com (gateway13.websitewelcome.com [69.93.82.3]) by pechora1.lax.icann.org (8.13.8/8.13.8) with ESMTP id r5DEn1T6031676 for ; Thu, 13 Jun 2013 14:49:22 GMT Received: by gateway13.websitewelcome.com (Postfix, from userid 5007) id 970416CE06BE3; Thu, 13 Jun 2013 09:25:20 -0500 (CDT) Received: from gator1743.hostgator.com (gator1743.hostgator.com [184.173.253.227]) by gateway13.websitewelcome.com (Postfix) with ESMTP id 696BD6CE0671B for ; Thu, 13 Jun 2013 09:25:19 -0500 (CDT) Received: from [173.73.135.101] (port=58633 helo=thunderfish.local) by gator1743.hostgator.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.80) (envelope-from ) id 1Un8Ss-0005Fx-W9; Thu, 13 Jun 2013 09:25:27 -0500 Message-ID: <51B9D656.1050401@ieca.com> Date: Thu, 13 Jun 2013 10:25:26 -0400 From: Sean Turner User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:17.0) Gecko/20130509 Thunderbird/17.0.6 MIME-Version: 1.0 To: Alexey Melnikov References: <51B5E98A.50404@ieca.com> <51B9C058.9060803@ieca.com> <51B9D49D.5000502@isode.com> In-Reply-To: <51B9D49D.5000502@isode.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - gator1743.hostgator.com X-AntiAbuse: Original Domain - iana.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - ieca.com X-BWhitelist: no X-Source: X-Source-Args: X-Source-Dir: X-Source-Sender: (thunderfish.local) [173.73.135.101]:58633 X-Source-Auth: sean.turner@ieca.com X-Email-Count: 7 X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IxNzQzLmhvc3RnYXRvci5jb20= X-Greylist: Delayed for 00:23:33 by milter-greylist-4.0 (pechora1.lax.icann.org [192.0.33.71]); Thu, 13 Jun 2013 14:49:22 +0000 (UTC) Cc: Bjoern Hoehrmann , media-types@iana.org, draft-ietf-pkix-est.all@tools.ietf.org, app-ads@tools.ietf.org Subject: Re: [media-types] Update of MIME media type application/pkcs7-mime Registration X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Jun 2013 14:49:29 -0000 On 6/13/13 10:18 AM, Alexey Melnikov wrote: > On 13/06/2013 13:51, Sean Turner wrote: >> On 6/13/13 6:47 AM, Bjoern Hoehrmann wrote: >>> * Sean Turner wrote: >>>> The application/pkcs7-mime content type defines the optional "smime- >>>> type" parameter [RFC5751]. The smime-type parameter for Server-side >>>> Key Generation Response is server-generated-key. >>>> >>>> smime-type name: server-generated-key >>>> >>>> Required parameters: None >>> >>> This should be preceded by >>> >>> Type name: application >>> >>> Subtype name: pkcs7-mime >>> >>> If this is supposed to register the application/pkcs7-mime type. But it >>> seems to me that using the media type registration template here is not >>> correct, I would rather expect "Updates: 5751" and then simply defining >>> the additional smime-type parameter, no need for the template. >> >> It's not registering application/pkcs7-mime is adding a parameter. If >> I understand correctly, if we added "Updates: 5751 (once approved)" to >> the header we could just omit the template completely? I'd argue that >> if we don't need the template that's great, but what's more important >> is that people be able to find these subtypes and the way to do that >> is to have them pointed to by the registry not the original document. >> How about if we just omit the template and ask IANA to *also* point to >> this document from the application/pkcs7-mime registry? > Sounds sensible to me. (But also see my other email). Other email is about using +der and adding some generic considerations about parsers. I'll have to go check on the +der bit with some folks but the other suggestion seems very reasonable. spt From turners@ieca.com Thu Jun 13 13:03:27 2013 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1AB9821F99A4 for ; Thu, 13 Jun 2013 13:03:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.148 X-Spam-Level: X-Spam-Status: No, score=-102.148 tagged_above=-999 required=5 tests=[AWL=0.073, BAYES_00=-2.599, DATE_IN_PAST_03_06=0.044, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bQOsBuAshLlg for ; Thu, 13 Jun 2013 13:03:20 -0700 (PDT) Received: from pechora3.lax.icann.org (pechora3.icann.org [IPv6:2620:0:2d0:201::1:73]) by ietfa.amsl.com (Postfix) with ESMTP id 4812121F99A3 for ; Thu, 13 Jun 2013 13:03:19 -0700 (PDT) Received: from gateway16.websitewelcome.com (gateway16.websitewelcome.com [69.93.164.21]) by pechora3.lax.icann.org (8.13.8/8.13.8) with ESMTP id r5DK2xcE011255 for ; Thu, 13 Jun 2013 20:03:19 GMT Received: by gateway16.websitewelcome.com (Postfix, from userid 5007) id D7A7857D9A193; Thu, 13 Jun 2013 14:34:00 -0500 (CDT) Received: from gator1743.hostgator.com (gator1743.hostgator.com [184.173.253.227]) by gateway16.websitewelcome.com (Postfix) with ESMTP id C404E57D9A13A for ; Thu, 13 Jun 2013 14:34:00 -0500 (CDT) Received: from [173.73.135.101] (port=59426 helo=thunderfish.local) by gator1743.hostgator.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.80) (envelope-from ) id 1UnDHr-0005E9-Tj; Thu, 13 Jun 2013 14:34:24 -0500 Message-ID: <51B9DB28.5090204@ieca.com> Date: Thu, 13 Jun 2013 10:46:00 -0400 From: Sean Turner User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:17.0) Gecko/20130509 Thunderbird/17.0.6 MIME-Version: 1.0 To: Alexey Melnikov References: <51B5E98A.50404@ieca.com> <51B9C058.9060803@ieca.com> <51B9D49D.5000502@isode.com> <51B9D656.1050401@ieca.com> In-Reply-To: <51B9D656.1050401@ieca.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - gator1743.hostgator.com X-AntiAbuse: Original Domain - iana.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - ieca.com X-BWhitelist: no X-Source: X-Source-Args: X-Source-Dir: X-Source-Sender: (thunderfish.local) [173.73.135.101]:59426 X-Source-Auth: sean.turner@ieca.com X-Email-Count: 7 X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IxNzQzLmhvc3RnYXRvci5jb20= X-Greylist: Delayed for 00:28:14 by milter-greylist-4.0 (pechora3.lax.icann.org [192.0.33.73]); Thu, 13 Jun 2013 20:03:19 +0000 (UTC) Cc: Bjoern Hoehrmann , media-types@iana.org, draft-ietf-pkix-est.all@tools.ietf.org, app-ads@tools.ietf.org Subject: Re: [media-types] Update of MIME media type application/pkcs7-mime Registration X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Jun 2013 20:03:27 -0000 On 6/13/13 10:25 AM, Sean Turner wrote: > On 6/13/13 10:18 AM, Alexey Melnikov wrote: >> On 13/06/2013 13:51, Sean Turner wrote: >>> On 6/13/13 6:47 AM, Bjoern Hoehrmann wrote: >>>> * Sean Turner wrote: >>>>> The application/pkcs7-mime content type defines the optional "smime- >>>>> type" parameter [RFC5751]. The smime-type parameter for Server-side >>>>> Key Generation Response is server-generated-key. >>>>> >>>>> smime-type name: server-generated-key >>>>> >>>>> Required parameters: None >>>> >>>> This should be preceded by >>>> >>>> Type name: application >>>> >>>> Subtype name: pkcs7-mime >>>> >>>> If this is supposed to register the application/pkcs7-mime type. But it >>>> seems to me that using the media type registration template here is not >>>> correct, I would rather expect "Updates: 5751" and then simply defining >>>> the additional smime-type parameter, no need for the template. >>> >>> It's not registering application/pkcs7-mime is adding a parameter. If >>> I understand correctly, if we added "Updates: 5751 (once approved)" to >>> the header we could just omit the template completely? I'd argue that >>> if we don't need the template that's great, but what's more important >>> is that people be able to find these subtypes and the way to do that >>> is to have them pointed to by the registry not the original document. >>> How about if we just omit the template and ask IANA to *also* point to >>> this document from the application/pkcs7-mime registry? >> Sounds sensible to me. (But also see my other email). > > Other email is about using +der and adding some generic considerations > about parsers. I'll have to go check on the +der bit with some folks > but the other suggestion seems very reasonable. I don't think we can put +der at the end of this because the others don't include it. But on the security considerations how about the following: ASN.1 encoding rules (e.g., DER and BER) have a type-length-value structure, and it is easy to construct malicious content with invalid length fields that can cause buffer overrun conditions. ASN.1 encoding rules allows for arbitrary levels of nesting, which may make it possible to construct malicious content that will cause a stack overflow. Interpreters of ASN.1 structures should be aware of these issues and should take appropriate measures to guard against buffer overflows and stack overruns in particular and malicious content in general. spt From henke@henke37.cjb.net Thu Jun 13 13:54:45 2013 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B882421F99C2 for ; Thu, 13 Jun 2013 13:54:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fqEvOfMPpfWc for ; Thu, 13 Jun 2013 13:54:39 -0700 (PDT) Received: from pechora1.lax.icann.org (unknown [IPv6:2620:0:2d0:201::1:71]) by ietfa.amsl.com (Postfix) with ESMTP id 2045121F91BC for ; Thu, 13 Jun 2013 13:54:38 -0700 (PDT) Received: from smtp-out12.han.skanova.net (smtp-out12.han.skanova.net [195.67.226.212]) by pechora1.lax.icann.org (8.13.8/8.13.8) with ESMTP id r5DKsHMK000576 for ; Thu, 13 Jun 2013 20:54:38 GMT Received: from [127.0.0.1] (90.230.202.243) by smtp-out12.han.skanova.net (8.5.133) (authenticated as u57601879) id 51B4DDE700141429; Thu, 13 Jun 2013 22:54:10 +0200 Message-ID: <51BA316C.6040803@henke37.cjb.net> Date: Thu, 13 Jun 2013 22:54:04 +0200 From: Henrik Andersson User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:20.0) Gecko/20100101 Firefox/20.0 SeaMonkey/2.17.1 MIME-Version: 1.0 To: Sean Turner , Alexey Melnikov References: <51B5E98A.50404@ieca.com> <51B9C058.9060803@ieca.com> <51B9D49D.5000502@isode.com> <51B9D656.1050401@ieca.com> <51B9DB28.5090204@ieca.com> In-Reply-To: <51B9DB28.5090204@ieca.com> X-Enigmail-Version: 1.5.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Antivirus: avast! (VPS 130613-0, 2013-06-13), Outbound message X-Antivirus-Status: Clean X-Greylist: IP, sender and recipient auto-whitelisted, not delayed by milter-greylist-4.0 (pechora1.lax.icann.org [192.0.33.71]); Thu, 13 Jun 2013 20:54:38 +0000 (UTC) Cc: Bjoern Hoehrmann , media-types@iana.org, draft-ietf-pkix-est.all@tools.ietf.org, app-ads@tools.ietf.org Subject: Re: [media-types] Update of MIME media type application/pkcs7-mime Registration X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Jun 2013 20:54:45 -0000 Sean Turner skriver: > > ASN.1 encoding rules (e.g., DER and BER) have a type-length-value > structure, and it is easy to construct malicious content with invalid > length fields that can cause buffer overrun conditions. ASN.1 encoding > rules allows for arbitrary levels of nesting, which may make it possible > to construct malicious content that will cause a stack overflow. > Interpreters of ASN.1 structures should be aware of these issues and > should take appropriate measures to guard against buffer overflows and > stack overruns in particular and malicious content in general. > Lots of formats have explicit length fields and nested structures. Parsers are expected to know how to deal with malformed data of this type. I don't think a warning of this kind is necessary, because if it was then pretty much all formats requiring binary transfer considerations (and then some!) would need it. From alexey.melnikov@isode.com Fri Jun 14 02:58:35 2013 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B548721F9BFD for ; Fri, 14 Jun 2013 02:58:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.947 X-Spam-Level: X-Spam-Status: No, score=-101.947 tagged_above=-999 required=5 tests=[AWL=-0.744, BAYES_00=-2.599, MIME_QP_LONG_LINE=1.396, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qQhBuZtZl2AI for ; Fri, 14 Jun 2013 02:58:30 -0700 (PDT) Received: from pechora1.lax.icann.org (unknown [IPv6:2620:0:2d0:201::1:71]) by ietfa.amsl.com (Postfix) with ESMTP id 39C6E21F9BA9 for ; Fri, 14 Jun 2013 02:58:29 -0700 (PDT) Received: from waldorf.isode.com (waldorf.isode.com [62.3.217.251]) by pechora1.lax.icann.org (8.13.8/8.13.8) with ESMTP id r5E9w67F031783 for ; Fri, 14 Jun 2013 09:58:27 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1371203882; d=isode.com; s=selector; i=@isode.com; bh=MKsWrO8RewvTx7jWaSnbFMhvzMrBuk180sFaeWFq1bs=; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version: In-Reply-To:References:Content-Type:Content-Transfer-Encoding: Content-ID:Content-Description; b=GtAGU7FZTvfl+4PUYy62ef4rfUdfgQwphSieb5GfmTlxTJ9licDnKxObvku/2wB6C9LRQP +yOK3deSIn4hoqBTs7AhuQCYDUvbI7NPfKdiMLeyU2V1+kns/jHZCNPAmkb2gThmmALdnh Tv14nIpWj7fYcEEy2FY2vhlv+LNuEyY=; Received: from [172.17.128.24] (richard.isode.com [62.3.217.249]) by waldorf.isode.com (submission channel) via TCP with ESMTPSA id ; Fri, 14 Jun 2013 10:58:02 +0100 References: <51B5E98A.50404@ieca.com> <51B9C058.9060803@ieca.com> <51B9D49D.5000502@isode.com> <51B9D656.1050401@ieca.com> <51B9DB28.5090204@ieca.com> <51BA316C.6040803@henke37.cjb.net> In-Reply-To: <51BA316C.6040803@henke37.cjb.net> Message-Id: X-Mailer: iPad Mail (9B206) From: Alexey Melnikov Date: Fri, 14 Jun 2013 11:02:31 +0100 To: Henrik Andersson MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable X-Greylist: IP, sender and recipient auto-whitelisted, not delayed by milter-greylist-4.0 (pechora1.lax.icann.org [192.0.33.71]); Fri, 14 Jun 2013 09:58:28 +0000 (UTC) Cc: Sean Turner , Bjoern Hoehrmann , "media-types@iana.org" , "draft-ietf-pkix-est.all@tools.ietf.org" , "app-ads@tools.ietf.org" Subject: Re: [media-types] Update of MIME media type application/pkcs7-mime Registration X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 14 Jun 2013 09:58:35 -0000 On 13 Jun 2013, at 21:54, Henrik Andersson wrote: > Sean Turner skriver: >>=20 >> ASN.1 encoding rules (e.g., DER and BER) have a type-length-value >> structure, and it is easy to construct malicious content with invalid >> length fields that can cause buffer overrun conditions. ASN.1 encoding >> rules allows for arbitrary levels of nesting, which may make it possible >> to construct malicious content that will cause a stack overflow. >> Interpreters of ASN.1 structures should be aware of these issues and >> should take appropriate measures to guard against buffer overflows and >> stack overruns in particular and malicious content in general. >>=20 >=20 > Lots of formats have explicit length fields and nested structures. > Parsers are expected to know how to deal with malformed data of this type.= >=20 > I don't think a warning of this kind is necessary, because if it was > then pretty much all formats requiring binary transfer considerations > (and then some!) would need it. More information is better, IMHO. At least calling out that this is DER/BER b= ased would be a good idea. From alexey.melnikov@isode.com Fri Jun 14 03:01:02 2013 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 88FC821F9C2F for ; Fri, 14 Jun 2013 03:01:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.885 X-Spam-Level: X-Spam-Status: No, score=-101.885 tagged_above=-999 required=5 tests=[AWL=-0.682, BAYES_00=-2.599, MIME_QP_LONG_LINE=1.396, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HtyYwhO57+4o for ; Fri, 14 Jun 2013 03:01:01 -0700 (PDT) Received: from pechora4.lax.icann.org (pechora4.icann.org [IPv6:2620:0:2d0:201::1:74]) by ietfa.amsl.com (Postfix) with ESMTP id C294821F9BFD for ; Fri, 14 Jun 2013 03:01:01 -0700 (PDT) Received: from waldorf.isode.com (cl-125.lon-03.gb.sixxs.net [IPv6:2a00:14f0:e000:7c::2]) by pechora4.lax.icann.org (8.13.8/8.13.8) with ESMTP id r5EA0djm022430 for ; Fri, 14 Jun 2013 10:01:00 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1371204036; d=isode.com; s=selector; i=@isode.com; bh=ETuhINzbOyjGw3qeZqaXxKo73AewcXbHJ5wuME0BIr8=; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version: In-Reply-To:References:Content-Type:Content-Transfer-Encoding: Content-ID:Content-Description; b=ibrc1Onx/SVOo9qG8A17X5QxAhw3+WtxQX//B9q9Ra3t7R8VFHdkoXL9CA3uEFowaX2fu6 DV1j+E3crU3kRQU1HcDqFEB1sPZI5IlItGFDSpwTO7OT5aCP7XEOtj/Dh6OZaS9X3zRJwx o4p67UY4UNsIz+Y3GhzIvHb1+6a8wX0=; Received: from [172.17.128.24] (richard.isode.com [62.3.217.249]) by waldorf.isode.com (submission channel) via TCP with ESMTPSA id ; Fri, 14 Jun 2013 11:00:36 +0100 References: <51B5E98A.50404@ieca.com> <51B9C058.9060803@ieca.com> <51B9D49D.5000502@isode.com> <51B9D656.1050401@ieca.com> <51B9DB28.5090204@ieca.com> In-Reply-To: <51B9DB28.5090204@ieca.com> Message-Id: <1D55B1F2-C803-4EA4-94D1-4CE08ECCB54B@isode.com> X-Mailer: iPad Mail (9B206) From: Alexey Melnikov Date: Fri, 14 Jun 2013 11:05:07 +0100 To: Sean Turner MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable X-Greylist: IP, sender and recipient auto-whitelisted, not delayed by milter-greylist-4.0 (pechora4.lax.icann.org [IPv6:2620:0:2d0:201::1:74]); Fri, 14 Jun 2013 10:01:01 +0000 (UTC) Cc: Bjoern Hoehrmann , "media-types@iana.org" , "draft-ietf-pkix-est.all@tools.ietf.org" , "app-ads@tools.ietf.org" Subject: Re: [media-types] Update of MIME media type application/pkcs7-mime Registration X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 14 Jun 2013 10:01:02 -0000 On 13 Jun 2013, at 15:46, Sean Turner wrote: > On 6/13/13 10:25 AM, Sean Turner wrote: >> On 6/13/13 10:18 AM, Alexey Melnikov wrote: >>> On 13/06/2013 13:51, Sean Turner wrote: >>>> On 6/13/13 6:47 AM, Bjoern Hoehrmann wrote: >>>>> * Sean Turner wrote: >>>>>> The application/pkcs7-mime content type defines the optional "smime- >>>>>> type" parameter [RFC5751]. The smime-type parameter for Server-side >>>>>> Key Generation Response is server-generated-key. >>>>>>=20 >>>>>> smime-type name: server-generated-key >>>>>>=20 >>>>>> Required parameters: None >>>>>=20 >>>>> This should be preceded by >>>>>=20 >>>>> Type name: application >>>>>=20 >>>>> Subtype name: pkcs7-mime >>>>>=20 >>>>> If this is supposed to register the application/pkcs7-mime type. But i= t >>>>> seems to me that using the media type registration template here is no= t >>>>> correct, I would rather expect "Updates: 5751" and then simply definin= g >>>>> the additional smime-type parameter, no need for the template. >>>>=20 >>>> It's not registering application/pkcs7-mime is adding a parameter. If >>>> I understand correctly, if we added "Updates: 5751 (once approved)" to >>>> the header we could just omit the template completely? I'd argue that >>>> if we don't need the template that's great, but what's more important >>>> is that people be able to find these subtypes and the way to do that >>>> is to have them pointed to by the registry not the original document. >>>> How about if we just omit the template and ask IANA to *also* point to >>>> this document from the application/pkcs7-mime registry? >>> Sounds sensible to me. (But also see my other email). >>=20 >> Other email is about using +der and adding some generic considerations >> about parsers. I'll have to go check on the +der bit with some folks >> but the other suggestion seems very reasonable. >=20 > I don't think we can put +der at the end of this because the others don't i= nclude it. There is no backward compatibility issue here, so I don't understand your ar= gument. The +suffix convention is a relatively new, but I think it should e used for= all new registrations that match existing suffixes. > But on the security considerations how about the following: >=20 > ASN.1 encoding rules (e.g., DER and BER) have a type-length-value structur= e, and it is easy to construct malicious content with invalid length fields t= hat can cause buffer overrun conditions. ASN.1 encoding rules allows for arb= itrary levels of nesting, which may make it possible to construct malicious c= ontent that will cause a stack overflow. Interpreters of ASN.1 structures sh= ould be aware of these issues and should take appropriate measures to guard a= gainst buffer overflows and stack overruns in particular and malicious conte= nt in general. Works for me. From turners@ieca.com Fri Jun 14 15:39:22 2013 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B76EF21F99C1 for ; Fri, 14 Jun 2013 15:39:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.172 X-Spam-Level: X-Spam-Status: No, score=-102.172 tagged_above=-999 required=5 tests=[AWL=0.093, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dVEKguZzDnGa for ; Fri, 14 Jun 2013 15:39:16 -0700 (PDT) Received: from pechora1.lax.icann.org (unknown [IPv6:2620:0:2d0:201::1:71]) by ietfa.amsl.com (Postfix) with ESMTP id BDDFB21F99C2 for ; Fri, 14 Jun 2013 15:39:15 -0700 (PDT) Received: from gateway05.websitewelcome.com (gateway05.websitewelcome.com [67.18.125.8]) by pechora1.lax.icann.org (8.13.8/8.13.8) with ESMTP id r5EMctSH002648 for ; Fri, 14 Jun 2013 22:39:15 GMT Received: by gateway05.websitewelcome.com (Postfix, from userid 5007) id 9FF938E66EE61; Fri, 14 Jun 2013 16:43:17 -0500 (CDT) Received: from gator1743.hostgator.com (gator1743.hostgator.com [184.173.253.227]) by gateway05.websitewelcome.com (Postfix) with ESMTP id 943CE8E66EE2D for ; Fri, 14 Jun 2013 16:43:17 -0500 (CDT) Received: from [173.73.135.101] (port=59520 helo=thunderfish.local) by gator1743.hostgator.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.80) (envelope-from ) id 1UnahC-0001ws-E4; Fri, 14 Jun 2013 15:34:06 -0500 Message-ID: <51BB7E3E.9060607@ieca.com> Date: Fri, 14 Jun 2013 16:34:06 -0400 From: Sean Turner User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:17.0) Gecko/20130509 Thunderbird/17.0.6 MIME-Version: 1.0 To: Alexey Melnikov References: <51B5E98A.50404@ieca.com> <51B9C058.9060803@ieca.com> <51B9D49D.5000502@isode.com> <51B9D656.1050401@ieca.com> <51B9DB28.5090204@ieca.com> <1D55B1F2-C803-4EA4-94D1-4CE08ECCB54B@isode.com> In-Reply-To: <1D55B1F2-C803-4EA4-94D1-4CE08ECCB54B@isode.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - gator1743.hostgator.com X-AntiAbuse: Original Domain - iana.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - ieca.com X-BWhitelist: no X-Source: X-Source-Args: X-Source-Dir: X-Source-Sender: (thunderfish.local) [173.73.135.101]:59520 X-Source-Auth: sean.turner@ieca.com X-Email-Count: 3 X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IxNzQzLmhvc3RnYXRvci5jb20= X-Greylist: Delayed for 00:30:00 by milter-greylist-4.0 (pechora1.lax.icann.org [192.0.33.71]); Fri, 14 Jun 2013 22:39:15 +0000 (UTC) Cc: Bjoern Hoehrmann , "media-types@iana.org" , "draft-ietf-pkix-est.all@tools.ietf.org" , "app-ads@tools.ietf.org" Subject: Re: [media-types] Update of MIME media type application/pkcs7-mime Registration X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 14 Jun 2013 22:39:22 -0000 On 6/14/13 6:05 AM, Alexey Melnikov wrote: > On 13 Jun 2013, at 15:46, Sean Turner wrote: > >> On 6/13/13 10:25 AM, Sean Turner wrote: >>> On 6/13/13 10:18 AM, Alexey Melnikov wrote: >>>> On 13/06/2013 13:51, Sean Turner wrote: >>>>> On 6/13/13 6:47 AM, Bjoern Hoehrmann wrote: >>>>>> * Sean Turner wrote: >>>>>>> The application/pkcs7-mime content type defines the optional "smime- >>>>>>> type" parameter [RFC5751]. The smime-type parameter for Server-side >>>>>>> Key Generation Response is server-generated-key. >>>>>>> >>>>>>> smime-type name: server-generated-key >>>>>>> >>>>>>> Required parameters: None >>>>>> >>>>>> This should be preceded by >>>>>> >>>>>> Type name: application >>>>>> >>>>>> Subtype name: pkcs7-mime >>>>>> >>>>>> If this is supposed to register the application/pkcs7-mime type. But it >>>>>> seems to me that using the media type registration template here is not >>>>>> correct, I would rather expect "Updates: 5751" and then simply defining >>>>>> the additional smime-type parameter, no need for the template. >>>>> >>>>> It's not registering application/pkcs7-mime is adding a parameter. If >>>>> I understand correctly, if we added "Updates: 5751 (once approved)" to >>>>> the header we could just omit the template completely? I'd argue that >>>>> if we don't need the template that's great, but what's more important >>>>> is that people be able to find these subtypes and the way to do that >>>>> is to have them pointed to by the registry not the original document. >>>>> How about if we just omit the template and ask IANA to *also* point to >>>>> this document from the application/pkcs7-mime registry? >>>> Sounds sensible to me. (But also see my other email). >>> >>> Other email is about using +der and adding some generic considerations >>> about parsers. I'll have to go check on the +der bit with some folks >>> but the other suggestion seems very reasonable. >> >> I don't think we can put +der at the end of this because the others don't include it. > > There is no backward compatibility issue here, so I don't understand your argument. > The +suffix convention is a relatively new, but I think it should e used for all new registrations that match existing suffixes. So it'd look like this: Content-Type: application/pkcs7-mime+der; smime-type=server-generated-key; name=smime.p7m I'm not sure this will work though. The certs are definitly use DER and so would any signed attributes but the rest of need not be. spt From turners@ieca.com Mon Jun 17 14:37:09 2013 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BE26A21F9B80 for ; Mon, 17 Jun 2013 14:37:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.242 X-Spam-Level: X-Spam-Status: No, score=-102.242 tagged_above=-999 required=5 tests=[AWL=0.357, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NT5X5bBp83gQ for ; Mon, 17 Jun 2013 14:37:03 -0700 (PDT) Received: from pechora4.lax.icann.org (pechora4.icann.org [IPv6:2620:0:2d0:201::1:74]) by ietfa.amsl.com (Postfix) with ESMTP id A2BDA21F88FB for ; Mon, 17 Jun 2013 14:37:01 -0700 (PDT) Received: from gateway06.websitewelcome.com (gateway06.websitewelcome.com [64.5.50.11]) by pechora4.lax.icann.org (8.13.8/8.13.8) with ESMTP id r5HLafgE016661 for ; Mon, 17 Jun 2013 21:37:01 GMT Received: by gateway06.websitewelcome.com (Postfix, from userid 5007) id 5DC29928FD0E9; Mon, 17 Jun 2013 15:42:10 -0500 (CDT) Received: from gator1743.hostgator.com (gator1743.hostgator.com [184.173.253.227]) by gateway06.websitewelcome.com (Postfix) with ESMTP id 4F650928FD0A5 for ; Mon, 17 Jun 2013 15:42:10 -0500 (CDT) Received: from [147.28.0.178] (port=50003 helo=thunderfish.local) by gator1743.hostgator.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.80) (envelope-from ) id 1UogFd-0003m5-Up; Mon, 17 Jun 2013 15:42:10 -0500 Message-ID: <51BF749F.2090209@ieca.com> Date: Tue, 18 Jun 2013 05:42:07 +0900 From: Sean Turner User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:17.0) Gecko/20130509 Thunderbird/17.0.6 MIME-Version: 1.0 To: Alexey Melnikov References: <51B5E98A.50404@ieca.com> <51B9C058.9060803@ieca.com> <51B9D49D.5000502@isode.com> <51B9D656.1050401@ieca.com> <51B9DB28.5090204@ieca.com> <1D55B1F2-C803-4EA4-94D1-4CE08ECCB54B@isode.com> <51BB7E3E.9060607@ieca.com> In-Reply-To: <51BB7E3E.9060607@ieca.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - gator1743.hostgator.com X-AntiAbuse: Original Domain - iana.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - ieca.com X-BWhitelist: no X-Source: X-Source-Args: X-Source-Dir: X-Source-Sender: (thunderfish.local) [147.28.0.178]:50003 X-Source-Auth: sean.turner@ieca.com X-Email-Count: 10 X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IxNzQzLmhvc3RnYXRvci5jb20= X-Greylist: Delayed for 00:29:40 by milter-greylist-4.0 (pechora4.lax.icann.org [192.0.33.74]); Mon, 17 Jun 2013 21:37:01 +0000 (UTC) Cc: Bjoern Hoehrmann , "media-types@iana.org" , "draft-ietf-pkix-est.all@tools.ietf.org" , "app-ads@tools.ietf.org" Subject: Re: [media-types] Update of MIME media type application/pkcs7-mime Registration X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Jun 2013 21:37:09 -0000 On 6/15/13 5:34 AM, Sean Turner wrote: > On 6/14/13 6:05 AM, Alexey Melnikov wrote: >> On 13 Jun 2013, at 15:46, Sean Turner wrote: >> >>> On 6/13/13 10:25 AM, Sean Turner wrote: >>>> On 6/13/13 10:18 AM, Alexey Melnikov wrote: >>>>> On 13/06/2013 13:51, Sean Turner wrote: >>>>>> On 6/13/13 6:47 AM, Bjoern Hoehrmann wrote: >>>>>>> * Sean Turner wrote: >>>>>>>> The application/pkcs7-mime content type defines the optional >>>>>>>> "smime- >>>>>>>> type" parameter [RFC5751]. The smime-type parameter for >>>>>>>> Server-side >>>>>>>> Key Generation Response is server-generated-key. >>>>>>>> >>>>>>>> smime-type name: server-generated-key >>>>>>>> >>>>>>>> Required parameters: None >>>>>>> >>>>>>> This should be preceded by >>>>>>> >>>>>>> Type name: application >>>>>>> >>>>>>> Subtype name: pkcs7-mime >>>>>>> >>>>>>> If this is supposed to register the application/pkcs7-mime type. >>>>>>> But it >>>>>>> seems to me that using the media type registration template here >>>>>>> is not >>>>>>> correct, I would rather expect "Updates: 5751" and then simply >>>>>>> defining >>>>>>> the additional smime-type parameter, no need for the template. >>>>>> >>>>>> It's not registering application/pkcs7-mime is adding a parameter. If >>>>>> I understand correctly, if we added "Updates: 5751 (once >>>>>> approved)" to >>>>>> the header we could just omit the template completely? I'd argue >>>>>> that >>>>>> if we don't need the template that's great, but what's more important >>>>>> is that people be able to find these subtypes and the way to do that >>>>>> is to have them pointed to by the registry not the original document. >>>>>> How about if we just omit the template and ask IANA to *also* >>>>>> point to >>>>>> this document from the application/pkcs7-mime registry? >>>>> Sounds sensible to me. (But also see my other email). >>>> >>>> Other email is about using +der and adding some generic considerations >>>> about parsers. I'll have to go check on the +der bit with some folks >>>> but the other suggestion seems very reasonable. >>> >>> I don't think we can put +der at the end of this because the others >>> don't include it. >> >> There is no backward compatibility issue here, so I don't understand >> your argument. >> The +suffix convention is a relatively new, but I think it should e >> used for all new registrations that match existing suffixes. > > So it'd look like this: > > Content-Type: application/pkcs7-mime+der; > smime-type=server-generated-key; name=smime.p7m > > I'm not sure this will work though. The certs are definitly use DER and > so would any signed attributes but the rest of need not be. The more I think about adding +ber to the media type for this request the more it doesn't make sense to me. This is not defining a new top-level media type nor a new sub-type it's defining a new optional parameter. This might have not been clear now that I look back at the form: OLD: smime-type name: server-generated-key Required parameters: None Optional parameters: None NEW: Required parameters: None Optional parameters: smime-type name: server-generated-key Adding +ber to application/pkcs7-mime doesn't seem to make sense to me because it would be retro actively changing a widely supported media type. The other thing would be to use +ber but only when this optional parameter appeared and that also seems a bit odd to me. spt From turners@ieca.com Mon Jun 17 15:35:54 2013 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6894821F9005 for ; Mon, 17 Jun 2013 15:35:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.099 X-Spam-Level: X-Spam-Status: No, score=-103.099 tagged_above=-999 required=5 tests=[AWL=1.166, BAYES_00=-2.599, GB_I_LETTER=-2, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oGav8f8YJ9zY for ; Mon, 17 Jun 2013 15:35:49 -0700 (PDT) Received: from pechora1.lax.icann.org (unknown [IPv6:2620:0:2d0:201::1:71]) by ietfa.amsl.com (Postfix) with ESMTP id E783621F8EDF for ; Mon, 17 Jun 2013 15:35:48 -0700 (PDT) Received: from gateway09.websitewelcome.com (gateway09.websitewelcome.com [67.18.124.12]) by pechora1.lax.icann.org (8.13.8/8.13.8) with ESMTP id r5HMZSk0005259 for ; Mon, 17 Jun 2013 22:35:48 GMT Received: by gateway09.websitewelcome.com (Postfix, from userid 507) id 83B41796B237C; Mon, 17 Jun 2013 17:13:38 -0500 (CDT) Received: from gator1743.hostgator.com (gator1743.hostgator.com [184.173.253.227]) by gateway09.websitewelcome.com (Postfix) with ESMTP id 642B7796B2300 for ; Mon, 17 Jun 2013 17:13:38 -0500 (CDT) Received: from [147.28.0.178] (port=50075 helo=thunderfish.local) by gator1743.hostgator.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.80) (envelope-from ) id 1Uohgk-0003dT-OK; Mon, 17 Jun 2013 17:14:14 -0500 Message-ID: <51BF8A35.9060205@ieca.com> Date: Tue, 18 Jun 2013 07:14:13 +0900 From: Sean Turner User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:17.0) Gecko/20130509 Thunderbird/17.0.6 MIME-Version: 1.0 To: Alexey Melnikov References: <51ACCEB0.5070402@ieca.com> <51B5DE9F.3000702@ieca.com> <51B9D163.9090600@isode.com> In-Reply-To: <51B9D163.9090600@isode.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - gator1743.hostgator.com X-AntiAbuse: Original Domain - iana.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - ieca.com X-BWhitelist: no X-Source: X-Source-Args: X-Source-Dir: X-Source-Sender: (thunderfish.local) [147.28.0.178]:50075 X-Source-Auth: sean.turner@ieca.com X-Email-Count: 4 X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IxNzQzLmhvc3RnYXRvci5jb20= X-Greylist: Delayed for 00:20:51 by milter-greylist-4.0 (pechora1.lax.icann.org [192.0.33.71]); Mon, 17 Jun 2013 22:35:48 +0000 (UTC) Cc: media-types@iana.org Subject: Re: [media-types] review requested: draft-turner-application-cms-media-type X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Jun 2013 22:35:54 -0000 On 6/13/13 11:04 PM, Alexey Melnikov wrote: > Hi Sean, > > On 10/06/2013 15:11, Sean Turner wrote: >> Additional information: >> >> Magic number(s): None >> File extension(s): .cms > I would pick a different extension (possible a 4 letter one), unless > .cms is already in use for this media type. > > http://filext.com/file-extension/CMS shows something else. How about cmsc for cms content? spt From turners@ieca.com Mon Jun 17 22:27:24 2013 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 870A821F9DBC for ; Mon, 17 Jun 2013 22:27:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.358 X-Spam-Level: X-Spam-Status: No, score=-103.358 tagged_above=-999 required=5 tests=[AWL=1.241, BAYES_00=-2.599, GB_I_LETTER=-2, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zAm5lk12iuzD for ; Mon, 17 Jun 2013 22:27:19 -0700 (PDT) Received: from pechora1.lax.icann.org (unknown [IPv6:2620:0:2d0:201::1:71]) by ietfa.amsl.com (Postfix) with ESMTP id 6C9D121F9B44 for ; Mon, 17 Jun 2013 22:27:19 -0700 (PDT) Received: from gateway06.websitewelcome.com (gateway06.websitewelcome.com [64.5.52.9]) by pechora1.lax.icann.org (8.13.8/8.13.8) with ESMTP id r5I5Qxcx012350 for ; Tue, 18 Jun 2013 05:27:19 GMT Received: by gateway06.websitewelcome.com (Postfix, from userid 5007) id 6CDC89369B949; Tue, 18 Jun 2013 00:05:00 -0500 (CDT) Received: from gator1743.hostgator.com (gator1743.hostgator.com [184.173.253.227]) by gateway06.websitewelcome.com (Postfix) with ESMTP id 5EC799369B924 for ; Tue, 18 Jun 2013 00:05:00 -0500 (CDT) Received: from [147.28.0.178] (port=49705 helo=thunderfish.local) by gator1743.hostgator.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.80) (envelope-from ) id 1Uoo6G-0000HM-0O; Tue, 18 Jun 2013 00:05:00 -0500 Message-ID: <51BFEA7A.3020507@ieca.com> Date: Tue, 18 Jun 2013 14:04:58 +0900 From: Sean Turner User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:17.0) Gecko/20130509 Thunderbird/17.0.6 MIME-Version: 1.0 To: media-types@iana.org References: <51ACCEB0.5070402@ieca.com> <51B5DE9F.3000702@ieca.com> <51B9D163.9090600@isode.com> In-Reply-To: <51B9D163.9090600@isode.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - gator1743.hostgator.com X-AntiAbuse: Original Domain - iana.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - ieca.com X-BWhitelist: no X-Source: X-Source-Args: X-Source-Dir: X-Source-Sender: (thunderfish.local) [147.28.0.178]:49705 X-Source-Auth: sean.turner@ieca.com X-Email-Count: 2 X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IxNzQzLmhvc3RnYXRvci5jb20= X-Greylist: Delayed for 00:21:59 by milter-greylist-4.0 (pechora1.lax.icann.org [192.0.33.71]); Tue, 18 Jun 2013 05:27:19 +0000 (UTC) Cc: Alexey Melnikov Subject: Re: [media-types] review requested: draft-turner-application-cms-media-type X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2013 05:27:24 -0000 On 6/13/13 11:04 PM, Alexey Melnikov wrote: > Hi Sean, > > On 10/06/2013 15:11, Sean Turner wrote: >> Additional information: >> >> Magic number(s): None >> File extension(s): .cms > I would pick a different extension (possible a 4 letter one), unless > .cms is already in use for this media type. > > http://filext.com/file-extension/CMS shows something else. Updated file can be found here: http://datatracker.ietf.org/doc/draft-turner-application-cms-media-type spt From alexey.melnikov@isode.com Tue Jun 18 03:36:18 2013 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9383E21F9A27 for ; Tue, 18 Jun 2013 03:36:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.534 X-Spam-Level: X-Spam-Status: No, score=-102.534 tagged_above=-999 required=5 tests=[AWL=0.065, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3UCSVTgcS+-O for ; Tue, 18 Jun 2013 03:36:13 -0700 (PDT) Received: from pechora4.lax.icann.org (pechora4.icann.org [IPv6:2620:0:2d0:201::1:74]) by ietfa.amsl.com (Postfix) with ESMTP id 3C57821F9A49 for ; Tue, 18 Jun 2013 03:36:13 -0700 (PDT) Received: from statler.isode.com (statler.isode.com [62.3.217.254]) by pechora4.lax.icann.org (8.13.8/8.13.8) with ESMTP id r5IAZqoj029592 for ; Tue, 18 Jun 2013 10:36:12 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1371551750; d=isode.com; s=selector; i=@isode.com; bh=YxGrGho/gnixxFQIqlw8wKhsCwKQgoHubw8F5Y8VKzU=; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version: In-Reply-To:References:Content-Type:Content-Transfer-Encoding: Content-ID:Content-Description; b=E5z1JTv89quA4EmRn3rQGyssp9uHMznNGRJmUDMTVdM5bLIQ5eD9E1fDUk4GcFwZKkneA+ aHosEbzZeG48pe3WtmSeyiEYOVxIqhk74BhKJh4EseDIUrmen0kmmUKiZOgjxwE664MXrF jzbGPY50sdlvEApu7ppuQ0ecCcQZjDY=; Received: from [172.16.1.29] (shiny.isode.com [62.3.217.250]) by statler.isode.com (submission channel) via TCP with ESMTPA id ; Tue, 18 Jun 2013 11:35:50 +0100 Message-ID: <51C0380D.2010502@isode.com> Date: Tue, 18 Jun 2013 11:35:57 +0100 From: Alexey Melnikov User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:17.0) Gecko/20130509 Thunderbird/17.0.6 To: Sean Turner References: <51B5E98A.50404@ieca.com> <51B9C058.9060803@ieca.com> <51B9D49D.5000502@isode.com> <51B9D656.1050401@ieca.com> <51B9DB28.5090204@ieca.com> <1D55B1F2-C803-4EA4-94D1-4CE08ECCB54B@isode.com> <51BB7E3E.9060607@ieca.com> <51BF749F.2090209@ieca.com> In-Reply-To: <51BF749F.2090209@ieca.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Greylist: IP, sender and recipient auto-whitelisted, not delayed by milter-greylist-4.0 (pechora4.lax.icann.org [192.0.33.74]); Tue, 18 Jun 2013 10:36:13 +0000 (UTC) Cc: "media-types@iana.org" , "draft-ietf-pkix-est.all@tools.ietf.org" , "app-ads@tools.ietf.org" Subject: Re: [media-types] Update of MIME media type application/pkcs7-mime Registration X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2013 10:36:18 -0000 On 17/06/2013 21:42, Sean Turner wrote: > On 6/15/13 5:34 AM, Sean Turner wrote: >> On 6/14/13 6:05 AM, Alexey Melnikov wrote: >>> On 13 Jun 2013, at 15:46, Sean Turner wrote: >>> >>>> On 6/13/13 10:25 AM, Sean Turner wrote: >>>>> On 6/13/13 10:18 AM, Alexey Melnikov wrote: >>>>>> On 13/06/2013 13:51, Sean Turner wrote: >>>>>>> On 6/13/13 6:47 AM, Bjoern Hoehrmann wrote: >>>>>>>> * Sean Turner wrote: >>>>>>>>> The application/pkcs7-mime content type defines the optional >>>>>>>>> "smime- >>>>>>>>> type" parameter [RFC5751]. The smime-type parameter for >>>>>>>>> Server-side >>>>>>>>> Key Generation Response is server-generated-key. >>>>>>>>> >>>>>>>>> smime-type name: server-generated-key >>>>>>>>> >>>>>>>>> Required parameters: None >>>>>>>> >>>>>>>> This should be preceded by >>>>>>>> >>>>>>>> Type name: application >>>>>>>> >>>>>>>> Subtype name: pkcs7-mime >>>>>>>> >>>>>>>> If this is supposed to register the application/pkcs7-mime type. >>>>>>>> But it >>>>>>>> seems to me that using the media type registration template here >>>>>>>> is not >>>>>>>> correct, I would rather expect "Updates: 5751" and then simply >>>>>>>> defining >>>>>>>> the additional smime-type parameter, no need for the template. >>>>>>> >>>>>>> It's not registering application/pkcs7-mime is adding a >>>>>>> parameter. If >>>>>>> I understand correctly, if we added "Updates: 5751 (once >>>>>>> approved)" to >>>>>>> the header we could just omit the template completely? I'd argue >>>>>>> that >>>>>>> if we don't need the template that's great, but what's more >>>>>>> important >>>>>>> is that people be able to find these subtypes and the way to do >>>>>>> that >>>>>>> is to have them pointed to by the registry not the original >>>>>>> document. >>>>>>> How about if we just omit the template and ask IANA to *also* >>>>>>> point to >>>>>>> this document from the application/pkcs7-mime registry? >>>>>> Sounds sensible to me. (But also see my other email). >>>>> >>>>> Other email is about using +der and adding some generic >>>>> considerations >>>>> about parsers. I'll have to go check on the +der bit with some folks >>>>> but the other suggestion seems very reasonable. >>>> >>>> I don't think we can put +der at the end of this because the others >>>> don't include it. >>> >>> There is no backward compatibility issue here, so I don't understand >>> your argument. >>> The +suffix convention is a relatively new, but I think it should e >>> used for all new registrations that match existing suffixes. >> >> So it'd look like this: >> >> Content-Type: application/pkcs7-mime+der; >> smime-type=server-generated-key; name=smime.p7m >> >> I'm not sure this will work though. The certs are definitly use DER and >> so would any signed attributes but the rest of need not be. > > The more I think about adding +ber to the media type for this request > the more it doesn't make sense to me. This is not defining a new > top-level media type nor a new sub-type it's defining a new optional > parameter. This might have not been clear now that I look back at the > form: > > OLD: > > smime-type name: server-generated-key > > Required parameters: None > > Optional parameters: None > > NEW: > > Required parameters: None > > Optional parameters: smime-type name: server-generated-key > > Adding +ber to application/pkcs7-mime doesn't seem to make sense to me > because it would be retro actively changing a widely supported media > type. The other thing would be to use +ber but only when this > optional parameter appeared and that also seems a bit odd to me. One (or both) of us got confused. Of course it doesn't make sense to change existing MIME type. I was recommending use of +ber suffix for new MIME type registrations. From turners@ieca.com Tue Jun 18 07:19:09 2013 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4B7E921F9F14 for ; Tue, 18 Jun 2013 07:19:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.25 X-Spam-Level: X-Spam-Status: No, score=-102.25 tagged_above=-999 required=5 tests=[AWL=0.015, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id C-MpjobAHtDD for ; Tue, 18 Jun 2013 07:18:52 -0700 (PDT) Received: from pechora7.dc.icann.org (pechora7.icann.org [IPv6:2620:0:2830:201::1:73]) by ietfa.amsl.com (Postfix) with ESMTP id 15D5A21F9EE5 for ; Tue, 18 Jun 2013 07:18:52 -0700 (PDT) Received: from gateway15.websitewelcome.com (gateway15.websitewelcome.com [67.18.71.13]) by pechora7.dc.icann.org (8.13.8/8.13.8) with ESMTP id r5IEIVVh030907 for ; Tue, 18 Jun 2013 14:18:51 GMT Received: by gateway15.websitewelcome.com (Postfix, from userid 5007) id DFE28A7FA2335; Tue, 18 Jun 2013 08:57:07 -0500 (CDT) Received: from gator1743.hostgator.com (gator1743.hostgator.com [184.173.253.227]) by gateway15.websitewelcome.com (Postfix) with ESMTP id D336BA7FA230F for ; Tue, 18 Jun 2013 08:57:07 -0500 (CDT) Received: from [147.28.0.178] (port=49320 helo=thunderfish.local) by gator1743.hostgator.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.80) (envelope-from ) id 1UowPD-0004xz-Fr; Tue, 18 Jun 2013 08:57:07 -0500 Message-ID: <51C06730.6030504@ieca.com> Date: Tue, 18 Jun 2013 22:57:04 +0900 From: Sean Turner User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:17.0) Gecko/20130509 Thunderbird/17.0.6 MIME-Version: 1.0 To: Alexey Melnikov , "draft-ietf-pkix-est.all@tools.ietf.org" References: <51B5E98A.50404@ieca.com> <51B9C058.9060803@ieca.com> <51B9D49D.5000502@isode.com> <51B9D656.1050401@ieca.com> <51B9DB28.5090204@ieca.com> <1D55B1F2-C803-4EA4-94D1-4CE08ECCB54B@isode.com> <51BB7E3E.9060607@ieca.com> <51BF749F.2090209@ieca.com> <51C0380D.2010502@isode.com> In-Reply-To: <51C0380D.2010502@isode.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - gator1743.hostgator.com X-AntiAbuse: Original Domain - iana.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - ieca.com X-BWhitelist: no X-Source: X-Source-Args: X-Source-Dir: X-Source-Sender: (thunderfish.local) [147.28.0.178]:49320 X-Source-Auth: sean.turner@ieca.com X-Email-Count: 6 X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IxNzQzLmhvc3RnYXRvci5jb20= X-Greylist: IP, sender and recipient auto-whitelisted, not delayed by milter-greylist-4.2.3 (pechora7.dc.icann.org [192.0.46.73]); Tue, 18 Jun 2013 14:18:51 +0000 (UTC) Cc: "media-types@iana.org" , "app-ads@tools.ietf.org" Subject: Re: [media-types] Update of MIME media type application/pkcs7-mime Registration X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2013 14:19:09 -0000 On 6/18/13 7:35 PM, Alexey Melnikov wrote: > On 17/06/2013 21:42, Sean Turner wrote: >> On 6/15/13 5:34 AM, Sean Turner wrote: >>> On 6/14/13 6:05 AM, Alexey Melnikov wrote: >>>> On 13 Jun 2013, at 15:46, Sean Turner wrote: >>>> >>>>> On 6/13/13 10:25 AM, Sean Turner wrote: >>>>>> On 6/13/13 10:18 AM, Alexey Melnikov wrote: >>>>>>> On 13/06/2013 13:51, Sean Turner wrote: >>>>>>>> On 6/13/13 6:47 AM, Bjoern Hoehrmann wrote: >>>>>>>>> * Sean Turner wrote: >>>>>>>>>> The application/pkcs7-mime content type defines the optional >>>>>>>>>> "smime- >>>>>>>>>> type" parameter [RFC5751]. The smime-type parameter for >>>>>>>>>> Server-side >>>>>>>>>> Key Generation Response is server-generated-key. >>>>>>>>>> >>>>>>>>>> smime-type name: server-generated-key >>>>>>>>>> >>>>>>>>>> Required parameters: None >>>>>>>>> >>>>>>>>> This should be preceded by >>>>>>>>> >>>>>>>>> Type name: application >>>>>>>>> >>>>>>>>> Subtype name: pkcs7-mime >>>>>>>>> >>>>>>>>> If this is supposed to register the application/pkcs7-mime type. >>>>>>>>> But it >>>>>>>>> seems to me that using the media type registration template here >>>>>>>>> is not >>>>>>>>> correct, I would rather expect "Updates: 5751" and then simply >>>>>>>>> defining >>>>>>>>> the additional smime-type parameter, no need for the template. >>>>>>>> >>>>>>>> It's not registering application/pkcs7-mime is adding a >>>>>>>> parameter. If >>>>>>>> I understand correctly, if we added "Updates: 5751 (once >>>>>>>> approved)" to >>>>>>>> the header we could just omit the template completely? I'd argue >>>>>>>> that >>>>>>>> if we don't need the template that's great, but what's more >>>>>>>> important >>>>>>>> is that people be able to find these subtypes and the way to do >>>>>>>> that >>>>>>>> is to have them pointed to by the registry not the original >>>>>>>> document. >>>>>>>> How about if we just omit the template and ask IANA to *also* >>>>>>>> point to >>>>>>>> this document from the application/pkcs7-mime registry? >>>>>>> Sounds sensible to me. (But also see my other email). >>>>>> >>>>>> Other email is about using +der and adding some generic >>>>>> considerations >>>>>> about parsers. I'll have to go check on the +der bit with some folks >>>>>> but the other suggestion seems very reasonable. >>>>> >>>>> I don't think we can put +der at the end of this because the others >>>>> don't include it. >>>> >>>> There is no backward compatibility issue here, so I don't understand >>>> your argument. >>>> The +suffix convention is a relatively new, but I think it should e >>>> used for all new registrations that match existing suffixes. >>> >>> So it'd look like this: >>> >>> Content-Type: application/pkcs7-mime+der; >>> smime-type=server-generated-key; name=smime.p7m >>> >>> I'm not sure this will work though. The certs are definitly use DER and >>> so would any signed attributes but the rest of need not be. >> >> The more I think about adding +ber to the media type for this request >> the more it doesn't make sense to me. This is not defining a new >> top-level media type nor a new sub-type it's defining a new optional >> parameter. This might have not been clear now that I look back at the >> form: >> >> OLD: >> >> smime-type name: server-generated-key >> >> Required parameters: None >> >> Optional parameters: None >> >> NEW: >> >> Required parameters: None >> >> Optional parameters: smime-type name: server-generated-key >> >> Adding +ber to application/pkcs7-mime doesn't seem to make sense to me >> because it would be retro actively changing a widely supported media >> type. The other thing would be to use +ber but only when this >> optional parameter appeared and that also seems a bit odd to me. > > One (or both) of us got confused. Of course it doesn't make sense to > change existing MIME type. I was recommending use of +ber suffix for new > MIME type registrations. Okay - roger might have been me. Anyway that's another thread then ;) But, I'll still ask the authors up the registration text as noted above with the old/new text. spt From alexey.melnikov@isode.com Tue Jun 18 09:10:55 2013 Return-Path: X-Original-To: media-types@ietfa.amsl.com Delivered-To: media-types@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A078121F9942 for ; Tue, 18 Jun 2013 09:10:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.538 X-Spam-Level: X-Spam-Status: No, score=-103.538 tagged_above=-999 required=5 tests=[AWL=1.061, BAYES_00=-2.599, GB_I_LETTER=-2, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vpW-le7VGAZ1 for ; Tue, 18 Jun 2013 09:10:50 -0700 (PDT) Received: from pechora5.dc.icann.org (unknown [IPv6:2620:0:2830:201::1:71]) by ietfa.amsl.com (Postfix) with ESMTP id 1EE9221F8D16 for ; Tue, 18 Jun 2013 09:10:50 -0700 (PDT) Received: from statler.isode.com (statler.isode.com [62.3.217.254]) by pechora5.dc.icann.org (8.13.8/8.13.8) with ESMTP id r5IGASw2013604 for ; Tue, 18 Jun 2013 16:10:48 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1371571807; d=isode.com; s=selector; i=@isode.com; bh=xa3sni3y+nRLP0EGbxdgbv/+Z9cG9T5TjeKfy1olszU=; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version: In-Reply-To:References:Content-Type:Content-Transfer-Encoding: Content-ID:Content-Description; b=wdoC62VOH5/+XLLxfv1pz0Cm2HreIlQEjsu7gK89s6zopflEa3umsDuA+H+kFHrxuZ2BFy /GBncrUawwnvZ9EVXn01v3sVESp9wvNTi7HqB+McADwFbyoKYc8K9mQrQ1Rhrns/fDZ4ej 1NQ1kjhRDheH0DgD7vW48mpnHd6CN7A=; Received: from [172.16.1.29] (shiny.isode.com [62.3.217.250]) by statler.isode.com (submission channel) via TCP with ESMTPA id ; Tue, 18 Jun 2013 17:10:07 +0100 Message-ID: <51C08665.1030800@isode.com> Date: Tue, 18 Jun 2013 17:10:13 +0100 From: Alexey Melnikov User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:17.0) Gecko/20130509 Thunderbird/17.0.6 To: Sean Turner References: <51ACCEB0.5070402@ieca.com> <51B5DE9F.3000702@ieca.com> <51B9D163.9090600@isode.com> <51BFEA7A.3020507@ieca.com> In-Reply-To: <51BFEA7A.3020507@ieca.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Greylist: IP, sender and recipient auto-whitelisted, not delayed by milter-greylist-4.0 (pechora5.dc.icann.org [192.0.46.71]); Tue, 18 Jun 2013 16:10:49 +0000 (UTC) Cc: media-types@iana.org Subject: Re: [media-types] review requested: draft-turner-application-cms-media-type X-BeenThere: media-types@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "IANA mailing list for reviewing Media Type \(MIME Type, Content Type\) registration requests." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2013 16:10:56 -0000 On 18/06/2013 06:04, Sean Turner wrote: > On 6/13/13 11:04 PM, Alexey Melnikov wrote: >> Hi Sean, >> >> On 10/06/2013 15:11, Sean Turner wrote: >>> Additional information: >>> >>> Magic number(s): None >>> File extension(s): .cms >> I would pick a different extension (possible a 4 letter one), unless >> .cms is already in use for this media type. >> >> http://filext.com/file-extension/CMS shows something else. > > Updated file can be found here: > http://datatracker.ietf.org/doc/draft-turner-application-cms-media-type This looks Ok to me.