[media-types] Re: [IANA #1457100] application/vnd.ma jikah.mjksig registration request

"Murray S. Kucherawy" <[email protected]>
Newsgroups gmane.ietf.types
Message-ID <CAL0qLwY3ac=zwkie7WnXtprkL2FYZTgmxDxVDrCiAsijinJkwA@mail.gmail.com>
Approved with that change then.

-MSK

On Tue, Aug 11, 2026 at 7:12 PM Amanda Baber via RT <
[email protected]> wrote:

> Hi Murray,
>
> Answers inline. Is this OK to register?
>
> thanks,
> Amanda
>
> On Tue Aug 11 14:13:59 2026, [email protected] wrote:
> > On Mon, Aug 10, 2026 at 6:58 PM Amanda Baber via RT <
> > [email protected]> wrote:
> >
> > > > Name: Josef Elijah Delos Santos Fabian
> > > >
> > > > Email: [email protected]
> > > >
> > > > Media type name: application
> > > >
> > > > Media subtype name: vnd.majikah.mjksig
> > > >
> > > > Required parameters: N/A
> > > >
> > > > Optional parameters: NA
> > > >
> > > > Encoding considerations: binary
> > > >
> > > > The format begins with a raw 12-byte binary header containing magic
> > > > bytes (0x4D 0x4A 0x4B 0x53 0x49 0x47), version byte, reserved byte,
> > > > and a big-endian uint32 payload length integer. It may contain
> > > > arbitrary binary octets, requiring binary-safe transport or
> > > > 8bit/base64 transfer encoding on text-only channels.
> > >
> >
> > This isn't necessary in the registration template since the published
> > specificaton is linked, and I presume this material is repeated there.
>
> They're OK with removing that paragraph from the registration.
>
> > > > Security considerations: Active/Executable Content: The media type
> > > > does not contain active or executable content. Files are parsed
> > > > strictly as static signature envelopes and data structures. Parsers
> > > > must ensure input validation on header length fields to prevent
> buffer
> > > > allocation attacks or out-of-bounds reads.
> > > >
> > > > Privacy and Integrity: The format inherently provides integrity,
> > > > authenticity, and non-repudiation services through hybrid classical
> > > > (Ed25519) and post-quantum (ML-DSA-87) cryptographic signatures.
> > > > Confidentiality is not provided by the envelope format itself;
> > > > sensitive files must be encrypted externally or in transit (e.g., via
> > > > TLS).
> > > >
> > > > JSON Usage: The binary header wraps a UTF-8 JSON structure
> > > > (MultiSigEnvelope). standard JSON parser security considerations
> apply
> > > > (e.g., handling unexpected keys gracefully, avoiding resource
> > > > exhaustion on deep nestings or malformed structures).
> > > >
> > > > Compression/Containers: The format does not use compression or
> > > > container formats (such as ZIP).
> > > >
> > > > External Links: The format does not rely on external URI referencing
> > > > to execute baseline parsing or signature verification.
> > > >
> > > > Interoperability considerations: Interoperability relies on strict
> > > > adherence to the 12-byte big-endian header structure, UTF-8 parsing
> of
> > > > the payload JSON, and deterministic canonicalization ("majik-
> > > > signature-v1:" + JSON.stringify(...)) prior to signature evaluation.
> > > > Implementations across different processor architectures must
> strictly
> > > > enforce big-endian byte order handling for integer fields.
> > >
> >
> > Were there prior versions of this format that are incompatible with the
> > version being registered?
>
> They write, "This is the first time it was ever submitted so no there
> aren't any prior versions that came before this."
>
> > > > Published specification: https://github.com/Majikah/majik-
> > > > signature/blob/main/MJKSIG_SPEC.md
> > > >
> > > > Applications which use this media: Used by the majik-signature SDK,
> > > > CLI tools, document signing applications, and cryptographic integrity
> > > > platforms to generate, attach, and verify hybrid classical and post-
> > > > quantum digital signatures for files and software packages.
> > > >
> > > > Fragment identifier considerations: N/A
> > > >
> > > > Restrictions on usage: N/A
> > > >
> > > > Provisional registration? (standards tree only): No
> > > >
> > > > Additional information:
> > > >
> > > > 1. Deprecated alias names for this type: N/A
> > > > 2. Magic number(s): 0x4D 0x4A 0x4B 0x53 0x49 0x47 (MJKSIG in ASCII)
> at
> > > > offset 0
> > > > 3. File extension(s): mjksig
> > > > 4. Macintosh file type code: N/A
> > > > 5. Object Identifiers: N/A
> > > >
> > > > General Comments: Majik Signature is a hybrid post-quantum content
> > > > signing and verification library for the Majikah ecosystem. Built on
> > > > top of Majik Key, it produces tamper-evident, forgery-resistant
> > > > digital signatures for any content — plaintext, JSON, PDFs, audio,
> > > > video, Office documents, or raw binary — using a dual-algorithm
> > > > architecture that combines classical Ed25519 with post-quantum
> ML-DSA-
> > > > 87 (FIPS-204).
> > > >
> > > > Person to contact for further information:
> > > >
> > > > 1. Name: Josef Elijah Fabian
> > > > 2. Email: [email protected]
> > > >
> > > > Intended usage: COMMON
> > > >
> > > > N/A
> > > >
> > > > Author/Change controller: Josef Elijah Fabian / Majikah Solutions OPC
> >
> >
> > -MSK
>
>

_______________________________________________
media-types mailing list -- [email protected]
To unsubscribe send an email to [email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.