Re: [jose] Allow compression of plain and JWS too?

"Vladimir Dzhuvinov / NimbusDS" <vladimir@nimbusds.com> Fri, 01 June 2012 11:52 UTC

Return-Path: <vladimir@nimbusds.com>
X-Original-To: jose@ietfa.amsl.com
Delivered-To: jose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9635921F8619 for <jose@ietfa.amsl.com>; Fri, 1 Jun 2012 04:52:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.523
X-Spam-Level:
X-Spam-Status: No, score=-2.523 tagged_above=-999 required=5 tests=[AWL=-0.076, BAYES_00=-2.599, SARE_SUB_ENC_UTF8=0.152]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xtb4n-GKHMoM for <jose@ietfa.amsl.com>; Fri, 1 Jun 2012 04:52:05 -0700 (PDT)
Received: from n1plwbeout07-02.prod.ams1.secureserver.net (n1plsmtp07-02-02.prod.ams1.secureserver.net [188.121.52.107]) by ietfa.amsl.com (Postfix) with SMTP id 06EA021F85C9 for <jose@ietf.org>; Fri, 1 Jun 2012 04:51:58 -0700 (PDT)
Received: (qmail 13699 invoked from network); 1 Jun 2012 11:51:58 -0000
Received: from unknown (HELO localhost) (188.121.52.246) by n1plwbeout07-02.prod.ams1.secureserver.net with SMTP; 1 Jun 2012 11:51:58 -0000
Received: (qmail 18101 invoked by uid 99); 1 Jun 2012 11:51:58 -0000
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="utf-8"
X-Originating-IP: 46.10.79.251
User-Agent: Workspace Webmail 5.6.18
Message-Id: <20120601045157.cc40c4f3d92d2001859047cd8cabb9ab.03891e2067.wbe@email07.europe.secureserver.net>
From: Vladimir Dzhuvinov / NimbusDS <vladimir@nimbusds.com>
To: "jose@ietf.org" <jose@ietf.org>
Date: Fri, 01 Jun 2012 04:51:57 -0700
Mime-Version: 1.0
Subject: Re: [jose] Allow compression of plain and JWS too?
X-BeenThere: jose@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Javascript Object Signing and Encryption <jose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jose>, <mailto:jose-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/jose>
List-Post: <mailto:jose@ietf.org>
List-Help: <mailto:jose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jose>, <mailto:jose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 01 Jun 2012 11:52:07 -0000

Thanks for the figures James. This looks like a good case to make
DEFLATE a standard option for all messages types.

Vladimir

--
Vladimir Dzhuvinov : www.NimbusDS.com : vladimir@nimbusds.com


-------- Original Message --------
Subject: RE: [jose] Allow compression of plain and JWS too?
From: "Manger, James H" <James.H.Manger@team.telstra.com>
Date: Thu, May 31, 2012 3:01 pm
To: Vladimir Dzhuvinov / NimbusDS <vladimir@nimbusds.com>,
"jose@ietf.org" <jose@ietf.org>

> Is there a reason to have compression only with JWE?

Compression should be available in signed and unprotected messages as
well. Specifying the "zip" header element for signed JWsec messages (aka
JWS) and unprotected JWsec messages (aka "alg":"none") would be a good
approach.


The DEFLATE algorithm does a really good job of almost eliminating the
33% overhead introduced by a base64url encoding.
* DEFLATE(B64(random)) is only 1% longer than random
* DEFLATE(B64(DEFLATE(text))) is less than 1% longer than DEFLATE(text)
* DEFLATE(B64(text)) however is significantly longer than DEFLATE(text)

--
James Manger