Re: HTTP Message Signatures (RFC 9421) and Registering SSH as a HTTP Signature Algorithm?

On Wed, Feb 14, 2024 at 7:41 PM Christopher Allen
<ChristopherA@lifewithalacrity.com> wrote:
> What would be involved in registering ssh? The spec says "specification required" but I've found in the past it is never just as simple as internet-draft specification and an IANA submission. Is this a working group decision, or is it "assigned expert" who they delegate the registry decisions to? (the latter is what is actually required for "specification required" CBOR tags). Do you know how that might work or who the "assigned experts" might be?

Here's the definition of "specification required":

https://www.rfc-editor.org/rfc/rfc8126.html#section-4.6

and the current registry:

https://www.iana.org/assignments/http-message-signature/

... and "Provisional" registration is easier than you might think it
is. Here is the section on doing a provisional registration for an
HTTP Signature Algorithm:

https://www.rfc-editor.org/rfc/rfc9421.html#section-6.2

So, basically:

1. Write a spec and follow the advice about what the "DE" (Designated
Expert) is going to check for in the section linked to above.

2. Publish the document as an I-D (or other stable location that we
can link to).

3. Request "Provisional" registration.

To get an "Active" registration, you'll need to do more work
(effectively achieving an RFC w/ multiple implementations, or (at the
very least) convincing the DE that the specification is sufficiently
detailed enough to lead to interoperable implementations).

There are currently no Designated Experts listed for the registry
because it just came into existence, but I would imagine they'll make
a call for those in the coming weeks (and at the very least, the
existing spec authors would do that job until others stepped in).

IOW, it feels like there is an easy path, measured in weeks, to
provisional registration for what you want to do.

Did that answer all of your questions, Christopher?

-- manu

-- 
Manu Sporny - https://www.linkedin.com/in/manusporny/
Founder/CEO - Digital Bazaar, Inc.
https://www.digitalbazaar.com/

Received on Thursday, 15 February 2024 14:26:07 UTC