-
Notifications
You must be signed in to change notification settings - Fork 15
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
IP Addresses as a format #206
base: main
Are you sure you want to change the base?
Changes from 1 commit
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Original file line number | Diff line number | Diff line change | ||||
---|---|---|---|---|---|---|
|
@@ -115,6 +115,7 @@ normative: | |||||
RFC8936: | ||||||
RFC9110: | ||||||
RFC9493: | ||||||
RFC4001: | ||||||
CAEP: | ||||||
author: | ||||||
- | ||||||
|
@@ -386,6 +387,31 @@ Subject Identifier Format. | |||||
"assertion_id": "_8e8dc5f69a98cc4c1ff3427e5ce34606fd672f91e6" | ||||||
} | ||||||
|
||||||
~~~ | ||||||
{: #sub-id-ips title="Example: 'ips' Subject Identifier"} | ||||||
|
||||||
### IP Addresses Subject Identifier Format {#sub-id-ips} | ||||||
|
||||||
The "IP addresses" Subject Identifier Format specifies an array of IP addresses observed by the Transmitter. | ||||||
Subject Identifiers of this format MUST contain the following members: | ||||||
|
||||||
ips | ||||||
|
||||||
> REQUIRED. The array of IP addresses of the subject as observed by the Transmitter. The value MUST be in the format of an array of strings, each one of which represents the RFC 4001 [RFC4001] string representation of an IP address. | ||||||
|
||||||
|
||||||
The "IP addresses" Subject Identifier Format is identified by the name | ||||||
"ips". | ||||||
|
||||||
Below is a non-normative example of Subject Identifier for the "IP addresses" | ||||||
Subject Identifier Format. | ||||||
|
||||||
~~~ json | ||||||
{ | ||||||
"format": "ips", | ||||||
"ips": ["10.29.37.75", "98.27.134.237"] | ||||||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
Suggested change
For IPv4 addresses, it is best practice to use allocated example IP ranges (RFC5737). We should also have an IPv6 address in the example (RFC3849). The IPv6 example uses common shorthand with the double colon. One question is whether we should allow that or require expansion. No opinion. There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Change of opinion: we should require expanded ones. @timcappalli to find official term (could be "uncompressed", "fully expanded", or "unabbreviated": https://www.ciscopress.com/articles/article.asp?p=2803866) 2024-10-08 call: loose consensus on this |
||||||
} | ||||||
|
||||||
~~~ | ||||||
{: #sub-id-samlassertionid title="Example: 'saml_assertion_id' Subject Identifier"} | ||||||
|
||||||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
You need to add RFC4001 as a reference. Do this at the top of the document by adding
RFC4001:
on line 105.