In message <[email protected]>, Timo
Gerke <[email protected]> writes
>I personally do not have a problem with JSON, but we strictly
>have to limit object depth.
the JSON schema in the DKIM 2 spec already limits the depth
>BTW: This concept completely contradicts the principles of
> RFC 5322.
I don't understand that comment ... but if you are truly worried about
unlimited depth then you should break away from DKIM2 and start writing
an IETF draft to update RFC2046 ... MIME multipart and MIME message can
both be nested to any arbitrary limit (albeit, good luck interworking
when you get past two or three)
>Standard JSON specifications lack strict object-key ordering
absolutely ... why is this a problem ?
> and
>duplicate key handling.
JSON schemas cannot forbid duplicate keys ... so you have identified an
actual issue that the spec needs to address (though just providing some
text would have been far quicker and easier for all concerned).
I will add some text to the -07 spec to explicitly forbid duplicate key
values.
I will note that JSON parsing libraries already have calling parameters
for this issue -- since the consensus is that duplicate keys are pretty
much always wrong -- so implementors will be able to deal with this
change very quickly (if indeed they are not already doing so).
>Introducing nested object complexity into
>the transport layer creates serialization risks that flat, native
>tag-value structures inherently avoid—which is why DKIM1 worked
>without JSON for 15 years.
it escapes me what serialization could possibly be required ...
... and should probably note that DKIM1 did not have JSON but does have
its own complex set of issues relating to duplicates that many systems
deal with extremely poorly. See for example the "Inbox Invasion" paper
by Zhang et al. We believe that DKIM2 fully addresses authentication
issues related to the type of header field issues that they identified.
--
richard @ highwayman . com "Nothing seems the same
Still you never see the change from day to day
And no-one notices the customs slip away"
_______________________________________________
Ietf-dkim mailing list -- [email protected]
To unsubscribe send an email to [email protected]
