Skip to content

fix rendering of OID and make clear that it can be used for other status mechanisms #284

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 6 commits into
base: main
Choose a base branch
from
Open

fix rendering of OID and make clear that it can be used for other status mechanisms #284

Changes from 5 commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
d1f97e8
fix rendering for oid
c2bo Apr 10, 2025
4678ce9
fix line width
c2bo Apr 10, 2025
f13540d
allow other status mechanisms to use the same OID
c2bo Apr 10, 2025
1f6df4f
document history
c2bo Apr 10, 2025
6125248
rename oid
c2bo Apr 10, 2025
c874117
Merge branch 'main' into rendering-fix-oid
c2bo Apr 13, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 9 additions & 4 deletions draft-ietf-oauth-status-list.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -904,16 +904,17 @@ The following is a non-normative example for media type `application/json`:
## Extended Key Usage Extension {#eku}

{{RFC5280}} specifies the Extended Key Usage (EKU) X.509 certificate extension for use on end entity certificates. The extension indicates one or more purposes for which the certified public key is valid. The EKU extension can be used in conjunction with the Key Usage (KU) extension, which indicates the set of basic cryptographic operations for which the certified key may be used. A certificate's issuer explicitly delegates Status List Token signing authority by issuing a X.509 certificate containing the KeyPurposeId defined below in the extended key usage extension.
Other specifications MAY choose to re-use this OID for other status mechanisms.

The following OID is defined for usage in the EKU extension

```
id-kp OBJECT IDENTIFIER ::=
~~~
id-kp OBJECT IDENTIFIER ::=
{ iso(1) identified-organization(3) dod(6) internet(1)
security(5) mechanisms(5) pkix(7) 3 }

id-kp-oauthStatusListSigning OBJECT IDENTIFIER ::= { id-kp TBD }
```
id-kp-oauthStatusSigning OBJECT IDENTIFIER ::= { id-kp TBD }
~~~

# Security Considerations {#Security}

Expand Down Expand Up @@ -1891,6 +1892,10 @@ CBOR encoding:
# Document History
{:numbered="false"}

-11

* Allow for extended key usage OID to be used for other status mechanisms

-10

* improve caching guidelines and move them to implementaiton considerations
Expand Down