Subject: [COSE] FW: CBOR Web Token (CWT) spec for the ACE working group

From: Mike Jones <[email-masked]>
Date: Sat, 5 Dec 2015 03:50:39 +0000

Per https://github.com/cose-wg/cose-issues/issues/42#issuecomment-158829660 by Kathleen...

From: Mike Jones
Sent: Friday, December 4, 2015 7:47 PM
To: [email-masked]
Subject: CBOR Web Token (CWT) spec for the ACE working group

After input from many interested people, IETF Security Area Director Kathleen Moriarty decided<http://www.ietf.org/mail-archive/web/cose/current/msg00810.html> that the right place for the CBOR Web Token (CWT) work is the ACE working group<http://datatracker.ietf.org/wg/ace/charter/>.  Today Erik Wahlström posted a new draft of the CBOR Web Token (CWT) specification that is intended for ACE.

This version of the spec references the JSON Web Token (JWT)<http://tools.ietf.org/html/rfc7519> claim definitions, rather than repeating them, and intentionally only includes equivalents of the claims defined by the JWT spec.  Other CWT claims, including those needed by ACE applications, will be defined by other specs and registered in the CWT claims registry.

The specification is available at:

·         http://tools.ietf.org/html/draft-wahlstroem-ace-cbor-web-token-00

An HTML-formatted version is also available at:

·         http://self-issued.info/docs/draft-wahlstroem-ace-cbor-web-token-00.html

                                                                -- Mike

P.S.  This note was also posted at http://self-issued.info/?p=1503 and as @selfissued<https://na01.safelinks.protection.outlook.com/?url=https%3a%2f%2ftwitter.com%2fselfissued&data=01%7c01%7cMichael.Jones%40microsoft.com%7c90a27b03c3c6448e4c3608d2aa6ea07c%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=s853DPkED04jn0TfPCt08beP%2fb%2fj7JFatTC5enN7rBU%3d>.