[media-types] Re: [IANA #1421575] application/vp+sd-jw t registration request

Can you point to where all the known security risks are identified in the
registration of this media type, as required by
https://www.rfc-editor.org/rfc/rfc6838.html#section-4.6 ?

On Sun, Dec 14, 2025 at 11:23 AM Murray S. Kucherawy <[email protected]>
wrote:

> Apologies for the delay.  I've caught up on the thread for this one and
> its companion and this one's approved.
>
> -MSK
>
> On Wed, Dec 10, 2025 at 2:58 PM Amanda Baber via RT <
> [email protected]> wrote:
>
>> Hi Murray,
>>
>> Sending a reminder for this one.
>>
>> Liaison response: https://datatracker.ietf.org/liaison/2078/
>>
>> thanks,
>> Amanda
>>
>> On Tue Jun 24 19:10:58 2025, amanda.baber wrote:
>> > Hi Murray,
>> >
>> > This is #2 of 2 from W3C.
>> >
>> > thanks,
>> > Amanda
>> >
>> > =====
>> >
>> > Name: Ivan Herman
>> >
>> > Email: [email protected]
>> >
>> > Media type name: application
>> >
>> > Media subtype name: vp+sd-jwt
>> >
>> > Required parameters: N/A
>> >
>> > Optional parameters: N/A
>> >
>> > Encoding considerations: binary
>> >
>> > application/sd-jwt values are a series of base64url-encoded values
>> > (some of which may be the empty string) separated by period ('.') and
>> > tilde ('~') characters.
>> >
>> > Security considerations: As defined in https://www.w3.org/TR/vc-jose-
>> > cose/#security-considerations. See also the security considerations in
>> > Selective Disclosure for JWTs (SD-JWT)
>> > (https://datatracker.ietf.org/doc/html/draft-ietf-oauth-selective-
>> > disclosure-jwt).
>> >
>> > Interoperability considerations: As defined in
>> > https://www.w3.org/TR/vc-jose-cose/#conformance.
>> >
>> > Published specification: https://www.w3.org/TR/vc-jose-cose
>> >
>> > Applications which use this media: W3C Verifiable Credential issuer,
>> > holder, and verifier software, conforming to the [VC-DATA-MODEL-2.0]
>> > (https://www.w3.org/TR/vc-data-model-2.0/), are among the applications
>> > that will use the media types. Conforming application types are
>> > described in https://www.w3.org/TR/vc-jose-cose/#conformance and
>> > https://www.w3.org/TR/vc-data-model-2.0/#conformance.
>> >
>> > Fragment identifier considerations: N/A
>> >
>> > Restrictions on usage: N/A
>> >
>> > Provisional registration? (standards tree only): No
>> >
>> > Additional information:
>> >
>> > 1. Deprecated alias names for this type: N/A
>> > 2. Magic number(s): N/A
>> > 3. File extension(s): N/A
>> > 4. Macintosh file type code: N/A
>> > 5. Object Identifiers: N/A
>> >
>> > General Comments:
>> >
>> > Person to contact for further information:
>> >
>> > 1. Name: Ivan Herman
>> > 2. Email: [email protected]
>> >
>> > Intended usage: COMMON
>> >
>> > Author/Change controller: W3C Verifiable Credentials Working Group
>> > [email protected]
>>
> _______________________________________________
> media-types mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
>

-- 
_CONFIDENTIALITY NOTICE: This email may contain confidential and privileged 
material for the sole use of the intended recipient(s). Any review, use, 
distribution or disclosure by others is strictly prohibited.  If you have 
received this communication in error, please notify the sender immediately 
by e-mail and delete the message and any file attachments from your 
computer. Thank you._

_______________________________________________
media-types mailing list -- [email protected]
To unsubscribe send an email to [email protected]