You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Although relying parties can implicitly check for the presence of vds(395) to decide if a COSE document is a COSE Merkle Proof, I think it would be clearer and less open to ambiguity to define a specific value of typ(6).
Having validators check for the presence of fields to decide what they are looking is making implementation more error prone than necessary. It would be possible to construct a document that would have both a vds(395) and the TBD fields of COSE Hash Envelope for example, and whose validation may end up depending on the order in which implementations check for the presence of fields. Dispatching on typ values is more likely to be implemented consistently.
5.2.1 makes the following suggestion:
Profiles of proof signatures are
encouraged to make additional protected header parameters mandatory,
to ensure that claims are processed with their intended semantics.
One way to include this information in the COSE structure is use of
the typ (type) Header Parameter, see
[I-D.ietf-cose-typ-header-parameter] and the similar guidance
But none of the proposed profiles have defined a typ, which would be redundant with vds(395).
The text was updated successfully, but these errors were encountered:
Although relying parties can implicitly check for the presence of
vds(395)
to decide if a COSE document is a COSE Merkle Proof, I think it would be clearer and less open to ambiguity to define a specific value oftyp(6)
.Having validators check for the presence of fields to decide what they are looking is making implementation more error prone than necessary. It would be possible to construct a document that would have both a
vds(395)
and the TBD fields of COSE Hash Envelope for example, and whose validation may end up depending on the order in which implementations check for the presence of fields. Dispatching ontyp
values is more likely to be implemented consistently.5.2.1 makes the following suggestion:
But none of the proposed profiles have defined a
typ
, which would be redundant withvds(395)
.The text was updated successfully, but these errors were encountered: