+1 for adoption, but please remove the "web" from the name.

One of the main features of JSON Web Tokens, from which this is inspired, is that it can be passed without any additional encoding in HTTP headers, parameters, forms, strings, etc. It's built for the "web" from the ground up.

The same is not true of the COSE-based token format here. It's designed for CoAP and other embedded systems that can speak the CBOR encoding natively. You could argue that this is the "web" in a sense but I think that it's misleading to implementors to claim such.

Therefore I strongly encourage the authors and ACE WG to drop the "web" from the name, leaving simply the COSE Token.

 -- Justin

On 4/10/2016 7:53 AM, Erik Wahlström wrote:
+1

On Thu, Apr 7, 2016 at 6:47 AM, Samuel Erdtman <sam...@erdtman.se <mailto:sam...@erdtman.se>> wrote:

    +1 for adoption

    Sent from my iPhone

    On 7 apr. 2016, at 03:34, Kepeng Li <kepeng....@alibaba-inc.com
    <mailto:kepeng....@alibaba-inc.com>> wrote:

    To: ACE WG
    Cc: OAuth and COSE WG

    Hello all,
    This note begins a Call For Adoption 
fordraft-wahlstroem-ace-cbor-web-token-00 [1]
    to be adopted as an ACE working group item, and added in the charter.
    The call ends on April 22, 2016.

    Keep in mind that adoption of a document does not mean the document
    as-is is ready for publication. It is merely acceptance of the
    document as a starting point for what will be the final product
    of the ACE working group. The working group is free to make changes to
    the document according to the normal consensus process.

    Please reply on this thread with expressions of support or opposition,
    preferably with comments, regarding accepting this as a work item.

    Note that this email was also copied to OAuth and COSE WG, in
    order to
    get input from wider audience.
    Thanks,
    Kind Regards
    Kepeng (ACE co-chair)

    [1]
    https://datatracker.ietf.org/doc/draft-wahlstroem-ace-cbor-web-token/

    _______________________________________________
    Ace mailing list
    a...@ietf.org <mailto:a...@ietf.org>
    https://www.ietf.org/mailman/listinfo/ace

    _______________________________________________
    Ace mailing list
    a...@ietf.org <mailto:a...@ietf.org>
    https://www.ietf.org/mailman/listinfo/ace




_______________________________________________
COSE mailing list
c...@ietf.org
https://www.ietf.org/mailman/listinfo/cose

_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth

Reply via email to