diff --git a/README.md b/README.md
index 7e4a732..bd734a5 100644
--- a/README.md
+++ b/README.md
@@ -2,9 +2,9 @@
This is the working area for the individual Internet-Draft, "CBOR Object Signing and Encryption (COSE): Headers for carrying and referencing X.509 certificates".
-* [Editor's Copy](https://cose-wg.github.io/x509/#go.draft-schaad-cose-x509.html)
+* [Editor's Copy](https://cose-wg.github.io/X509/#go.draft-schaad-cose-x509.html)
* [Individual Draft](https://tools.ietf.org/html/draft-schaad-cose-x509)
-* [Compare Editor's Copy to Individual Draft](https://cose-wg.github.io/x509/#go.draft-schaad-cose-x509.diff)
+* [Compare Editor's Copy to Individual Draft](https://cose-wg.github.io/X509/#go.draft-schaad-cose-x509.diff)
## Building the Draft
diff --git a/draft-schaad-cose-x509.xml b/draft-schaad-cose-x509.xml
index 0ce04c0..a4e165b 100644
--- a/draft-schaad-cose-x509.xml
+++ b/draft-schaad-cose-x509.xml
@@ -120,6 +120,24 @@
+
+
+
+
+ Should we define an extended key usage?
+
+
+ Are there any special certificate valiation text to be added?
+
+
+ List of other hash algorithms to be added.
+
+
+ Specific security considerations issues.
+
+
+
+
@@ -203,7 +221,7 @@
application/pkix-cert application/pkcs7-mime; smime-type="certs-only"
- Should we support a PEM type? I cannot find a registered media type for one
+ application/x-pem-file Should we support a PEM type? I cannot find a registered media type for one
As this header element implies a trust relationship, the header parameter MUST be in the protected header bag.
@@ -230,7 +248,7 @@
- namelabelvalue typedescription
+ NameValuevalue typedescriptionx5bagTBD4COSE_X509An unordered bag of X.509 certificatesx5chainTBD3COSE_X509An ordered chain of X.509 certificates
@@ -238,8 +256,12 @@
x5uTBD2uriURL pointing to an X.509 certificate
+
+ Below is an equivalent CDDL description of the text above.
+
+
@@ -252,7 +274,7 @@ COSE_CertHash = [ hashAlg: (int / tstr), hashValue: bstr ]
- NameLabelTypeAlgorithmDescription>
+ NameValueTypeAlgorithmDescription>static key X.509 thumbprintTBDCOSE_CertHashECDH-SS+HKDF-256, ECDH-SS+HKDF-512, ECDH-SS+A128KW, ECDH-SS+AES192KW, ECDH-SS+AES256KWThumbprint for the senders X.509 certificate
@@ -307,29 +329,53 @@ COSE_CertHash = [ hashAlg: (int / tstr), hashValue: bstr ]
- Put in the registrations.
+ IANA is requested to register the new COSE Header items in in the "COSE Header Parameters" registry.
+
+
+
+
+ IANA is requested to register the new COSE Header items in in the "COSE Header Algorithm Parameters" registry.
+
+
+
+
- Put in the registrations.
+ IANA is requested to register the following algorithms in the "COSE Algorithms" registry.
+
+
+ Name
+ Value
+ Description
+ Reference
+ Recommended
+ SHA-256TBDSHA-2 256-bit Hash[This Document]Yes
+ SHA-256/64TBDSHA-2 256-bit Hash trucated to 64-bits[This Document]No
+
-
There are security considerations:
-
+
+
+
+ Self-signed certificates and Trust Anchors
+
+
+
@@ -348,8 +394,10 @@ COSE_CertHash = [ hashAlg: (int / tstr), hashValue: bstr ]
&RFC2585;
&EDHOC;
+
+