[urn] Re: URN Namespace Registration for SAID (Self-Addres sing Identifiers)

Wenjing Chu <[email protected]> writes:
> The new application is here:
> https://github.com/trustoverip/kswg-said-urn-charter/blob/main/urn_application.txt

I don't see any reason to not register this namespace.

However the definition of it seems peculiar to me.  The registration
(and the definition of SAIDs generall) is very careful to have the SAID
contain a code specifying the hash that is used.  As the registration
says "each primitive includes a prepended type code identifying both the
cryptographic algorithm and value length, enabling stream parsing
without external delimiters".  But the process for verifying a SAID
requires that the application knows the canonical serialization for that
class of data objects and the canonical manner in which the SAID
placeholder is inderted into the object before it is hashed.  Given the
amount of information the application must share a-priori with other
applications which generate/verify a SAID, it's not clear why the hash
algorithm is not part of that information.

Dale

_______________________________________________
urn mailing list -- [email protected]
To unsubscribe send an email to [email protected]