[Secdispatch] draft-yossif-psea-02 posted — re-scoped as an EAT token profile (diff)

--===============1412039815760697305==
Content-Type: multipart/alternative;
 boundary="----=_NextPart_1032416.826995694343"

------=_NextPart_1032416.826995694343
Content-Type: text/plain;
 charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Following the discussion on -01, I've posted -02. The substantive change ad=
dresses the main point raised here: where -01 read as a requirements statem=
ent, -02 is a concrete token profile. It defines an EAT profile (RFC 9711) =
carried as a JWS, with a fixed claim set, JCS canonical encoding, an action=
-binding hash, cross-replay binding, and the verifier rules =E2=80=94 i.e. =
the wire format and verification logic, with deployment machinery left out =
of scope.

Diff:=C2=A0https://author-tools.ietf.org/iddiff?url2=3Ddraft-yossif-psea-02=
 [https://author-tools.ietf.org/iddiff?url2=3Ddraft-yossif-psea-02]
Datatracker:=C2=A0https://datatracker.ietf.org/doc/draft-yossif-psea/ [http=
s://datatracker.ietf.org/doc/draft-yossif-psea/]

Two questions for the list. First, whether the profile reads as a credible,=
 self-contained token format now rather than a requirements document. Secon=
d, on dispatch: the work sits between attestation evidence (RATS) and step-=
up/authorization (OAuth, RFC 9470) without belonging wholly to either, so I=
'd value views on the right venue to take it forward. CC'ing secdispatch fo=
r that reason.

I'm approaching this in a learning posture and would welcome correction on =
framing or anything that would trip a reviewer.

[Mohamad Khalil Yossif, Founder & CEO of Yuthent]
Mohamad Khalil Yossif
Founder & CEO =C2=B7 Yuthent
PSEA Spec Author =C2=B7 IETF draft-yossif-psea
[Yuthent =E2=80=94 Execution Authority Infrastructure]
=C2=A0
T: +972 50-931-1103 [tel:+972509311103]
E: [email protected] [mailto:[email protected]]
W: yuthent.com [https://yuthent.com] [LinkedIn] [https://www.linkedin.com/i=
n/mohamadkhalilyossif]
=C2=A0
[Yuthent =E2=80=94 Cryptographic proof of human authorization at execution =
time] [https://yuthent.com]
This email may contain confidential or sensitive information. If you are no=
t the intended recipient, any review, use, disclosure, distribution, or cop=
ying is prohibited. If you received this message in error, please delete it=
 immediately.
------=_NextPart_1032416.826995694343
Content-Type: text/html;
 charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<div id=3D"__MailbirdStyleContent" style=3D"font-size: 10pt;font-family: Ca=
scadia Code;color: #1A1A1A;text-align: right" dir=3D"rtl"><div class=3D"mb_=
sig"><div style=3D"text-align: left;" dir=3D"ltr"><div dir=3D"ltr" style=3D=
""><span style=3D"font-size: 13.3333px">Following the discussion on -01, I'=
ve posted -02. The substantive change addresses the main point raised here:=
 where -01 read as a requirements statement, -02 is a concrete token profil=
e. It defines an EAT profile (RFC 9711) carried as a JWS, with a fixed clai=
m set, JCS canonical encoding, an action-binding hash, cross-replay binding=
, and the verifier rules =E2=80=94 i.e. the wire format and verification lo=
gic, with deployment machinery left out of scope.</span></div><div dir=3D"l=
tr" style=3D""><span style=3D"font-size: 13.3333px"><br></span></div><div d=
ir=3D"ltr" style=3D""><span style=3D"font-size: 13.3333px">Diff:&nbsp;</spa=
n><a href=3D"https://author-tools.ietf.org/iddiff?url2=3Ddraft-yossif-psea-=
02" style=3D"font-size: 10pt"><span style=3D"font-size: 10pt">https://autho=
r-tools.ietf.org/iddiff?url2=3Ddraft-yossif-psea-02</span></a></div><div di=
r=3D"ltr" style=3D""><span style=3D"font-size: 13.3333px">Datatracker:&nbsp=
;</span><a href=3D"https://datatracker.ietf.org/doc/draft-yossif-psea/" sty=
le=3D"font-size: 10pt"><span style=3D"font-size: 10pt">https://datatracker.=
ietf.org/doc/draft-yossif-psea/</span></a></div><div dir=3D"ltr" style=3D""=
><span style=3D"font-size: 13.3333px"><br></span></div><div dir=3D"ltr" sty=
le=3D""><span style=3D"font-size: 13.3333px">Two questions for the list. Fi=
rst, whether the profile reads as a credible, self-contained token format n=
ow rather than a requirements document. Second, on dispatch: the work sits =
between attestation evidence (RATS) and step-up/authorization (OAuth, RFC 9=
470) without belonging wholly to either, so I'd value views on the right ve=
nue to take it forward. CC'ing secdispatch for that reason.</span></div><di=
v dir=3D"ltr" style=3D""><span style=3D"font-size: 13.3333px"><br></span></=
div><div dir=3D"ltr" style=3D""><span style=3D"font-size: 13.3333px">I'm ap=
proaching this in a learning posture and would welcome correction on framin=
g or anything that would trip a reviewer.</span></div><div dir=3D"ltr" styl=
e=3D""><span style=3D"font-size: 13.3333px"><br></span></div></div><table d=
ir=3D"ltr" cellpadding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"direct=
ion: ltr !important;unicode-bidi: embed;font-size: 14px;color: #000000;max-=
width: 600px;width: 100%;border-collapse: collapse;text-align: left">
    <tbody>
        <tr>
            <td style=3D"padding: 10px 0; text-align: left;">
                <table dir=3D"ltr" cellpadding=3D"0" cellspacing=3D"0" bord=
er=3D"0" width=3D"100%" style=3D"direction: ltr !important;">
                    <tbody><tr>
                        <td valign=3D"middle" style=3D"text-align: left;">
                            <table dir=3D"ltr" cellpadding=3D"0" cellspacin=
g=3D"0" border=3D"0" style=3D"direction: ltr !important;">
                                <tbody><tr>
                                    <td style=3D"padding-right: 15px; text-=
align: left;">
                                        <img src=3D"https://yuthent.com/pub=
lic/assets/email-signature/profile-600.jpg" width=3D"60" height=3D"60" alt=
=3D"Mohamad Khalil Yossif, Founder &amp; CEO of Yuthent" style=3D"display: =
block; border-radius: 50%; width: 60px; height: 60px; border: 0;"></img>
                                    </td>
                                    <td style=3D"line-height: 1.3; text-ali=
gn: left;">
                                        <div style=3D"font-size: 18px;font-=
weight: bold;color: #002b5c">Mohamad Khalil Yossif</div>
                                        <div style=3D"font-size: 13px;color=
: #333333;margin-top: 3px">Founder &amp; CEO =C2=B7 Yuthent</div>
                                        <div style=3D"font-size: 11px;color=
: #777777;margin-top: 3px">PSEA Spec Author =C2=B7 IETF draft-yossif-psea</=
div>
                                    </td>
                                </tr>
                            </tbody></table>
                        </td>
                        <td align=3D"right" valign=3D"middle" style=3D"text=
-align: right;">
                            <img src=3D"https://yuthent.com/assets/logo.png=
" width=3D"90" height=3D"90" alt=3D"Yuthent =E2=80=94 Execution Authority I=
nfrastructure" style=3D"display: inline-block; width: 90px; height: 90px; b=
order: 0;"></img>
                        </td>
                    </tr>
                </tbody></table>
            </td>
        </tr>
        <tr>
            <td style=3D"border-top: 1px solid #d9d9d9;font-size: 1px;line-=
height: 1px" height=3D"1">&nbsp;</td>
        </tr>
        <tr>
            <td style=3D"padding: 10px 0; text-align: left;">
                <table dir=3D"ltr" cellpadding=3D"0" cellspacing=3D"0" bord=
er=3D"0" width=3D"100%" style=3D"direction: ltr !important;">
                    <tbody><tr>
                        <td style=3D"font-size: 13px;color: #333333;line-he=
ight: 1.5;text-align: left">
                            <strong>T:</strong> <a href=3D"tel:+97250931110=
3" style=3D"color: #002b5c; text-decoration: none;">+972 50-931-1103</a><br>
                            <strong>E:</strong> <a href=3D"mailto:mohamad@y=
uthent.com" style=3D"color: #002b5c; text-decoration: none;">mohamad@yuthen=
t.com</a><br>
                            <strong>W:</strong> <a href=3D"https://yuthent.=
com" style=3D"color: #002b5c; text-decoration: none;">yuthent.com</a>
                        </td>
                        <td align=3D"right" valign=3D"middle" style=3D"text=
-align: right;">
                            <a href=3D"https://www.linkedin.com/in/mohamadk=
halilyossif" style=3D"text-decoration: none;">
                                <img src=3D"https://cdn-icons-png.flaticon.=
com/512/174/174857.png" width=3D"24" height=3D"24" alt=3D"LinkedIn" style=
=3D"border-radius: 4px; border: 0;"></img>
                            </a>
                        </td>
                    </tr>
                </tbody></table>
            </td>
        </tr>
        <tr>
            <td style=3D"border-top: 1px solid #d9d9d9;font-size: 1px;line-=
height: 1px" height=3D"1">&nbsp;</td>
        </tr>
        <tr>
            <td style=3D"padding-top: 10px; text-align: left;">
                <a href=3D"https://yuthent.com" style=3D"text-decoration: n=
one;">
                    <img src=3D"https://yuthent.com/public/assets/email-sig=
nature/banner-1200.png" width=3D"600" alt=3D"Yuthent =E2=80=94 Cryptographi=
c proof of human authorization at execution time" style=3D"display: block; =
width: 100%; max-width: 600px; height: auto; border: 0;"></img>
                </a>
            </td>
        </tr>
        <tr>
            <td style=3D"padding-top: 10px;font-size: 10px;color: #888888;l=
ine-height: 1.4;text-align: left">
                This email may contain confidential or sensitive informatio=
n. If you are not the intended recipient, any review, use, disclosure, dist=
ribution, or copying is prohibited. If you received this message in error, =
please delete it immediately.
            </td>
        </tr>
    </tbody>
</table></div></div>
------=_NextPart_1032416.826995694343--


--===============1412039815760697305==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KU2VjZGlzcGF0
Y2ggbWFpbGluZyBsaXN0IC0tIHNlY2Rpc3BhdGNoQGlldGYub3JnClRvIHVuc3Vic2NyaWJlIHNl
bmQgYW4gZW1haWwgdG8gc2VjZGlzcGF0Y2gtbGVhdmVAaWV0Zi5vcmcK

--===============1412039815760697305==--