Subject: [Rats] Attestation information model in CDDL

From: Laurence Lundblade <[email-masked]>
Date: Thu, 18 Apr 2019 08:08:58 -0700

Hi folks,

This is to check in as to whether it makes sense to describe the information model for attestation claims (or whatever we end up calling them) in CDDL. This seems like a good idea since it can describe both CBOR and JSON and it is new, shiny and modern.

There’s a few gaps that will need to be bridged:

- We definitely want binary strings for lots of the claims (many are hashes) in CBOR, but JSON can’t directly carry binary. Presumably we decide that they will be Base64 or Base64URL encoded in JSON.

- I can see wanting to use NaN and Infinity for some floating point numbers. They could be very convenient. CBOR can carry them, JSON can’t, so maybe this is handled on a claim-by-claim basis.

Any other gaps?

Does this make sense? 

Thanks!

LL