Registering media types for attestation formats

[thomas-fossati]

Using attestation "conceptual messages" in REST APIs usually requires typing information in the form of Internet Media Types.

Media types are also used in CMW to type the wrapped content.

While the "pure" EAT ecosystem is taken care of by EAT media types, the wider landscape is not.

We must raise awareness in the community and coordinate media types registrations of the relevant attestation formats.

E.g., for Intel TDX and SGX, AMD SEV-SNP, (v)TPM, Event Logs, etc.

[OR13]

There is also he CoAP Content-Formats registry https://www.iana.org/assignments/core-parameters/core-parameters.xhtml#content-formats

And https://datatracker.ietf.org/wg/core/documents/

[gkostal]

This sounds related from the backlog:

• Should CCC establish an OID prefix from IANA? (based on discussion 2022/03/29).

  • https://pen.iana.org/pen/PenApplication.page is the application process (30 days, no cost), and there's lots of other Foundations and Consortiums on the list who have done it, at https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers