Re: [jose] Allow compression of plain and JWS too?

"Manger, James H" <James.H.Manger@team.telstra.com> Thu, 31 May 2012 14:01 UTC

Return-Path: <James.H.Manger@team.telstra.com>
X-Original-To: jose@ietfa.amsl.com
Delivered-To: jose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B7B6E21F859F for <jose@ietfa.amsl.com>; Thu, 31 May 2012 07:01:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.708
X-Spam-Level:
X-Spam-Status: No, score=-0.708 tagged_above=-999 required=5 tests=[AWL=0.193, BAYES_00=-2.599, HELO_EQ_AU=0.377, HOST_EQ_AU=0.327, RELAY_IS_203=0.994]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9ptxIWW-XTkK for <jose@ietfa.amsl.com>; Thu, 31 May 2012 07:01:51 -0700 (PDT)
Received: from ipxavo.tcif.telstra.com.au (ipxavo.tcif.telstra.com.au [203.35.135.200]) by ietfa.amsl.com (Postfix) with ESMTP id CC95921F858A for <jose@ietf.org>; Thu, 31 May 2012 07:01:45 -0700 (PDT)
X-IronPort-AV: E=Sophos;i="4.75,693,1330866000"; d="scan'208";a="76105118"
Received: from unknown (HELO ipcbvi.tcif.telstra.com.au) ([10.97.217.204]) by ipoavi.tcif.telstra.com.au with ESMTP; 01 Jun 2012 00:01:44 +1000
X-IronPort-AV: E=McAfee;i="5400,1158,6727"; a="65683427"
Received: from wsmsg3701.srv.dir.telstra.com ([172.49.40.169]) by ipcbvi.tcif.telstra.com.au with ESMTP; 01 Jun 2012 00:01:44 +1000
Received: from WSMSG3153V.srv.dir.telstra.com ([172.49.40.159]) by WSMSG3701.srv.dir.telstra.com ([172.49.40.169]) with mapi; Fri, 1 Jun 2012 00:01:43 +1000
From: "Manger, James H" <James.H.Manger@team.telstra.com>
To: Vladimir Dzhuvinov / NimbusDS <vladimir@nimbusds.com>, "jose@ietf.org" <jose@ietf.org>
Date: Fri, 01 Jun 2012 00:01:41 +1000
Thread-Topic: [jose] Allow compression of plain and JWS too?
Thread-Index: Ac0/JS0k9vXGkur0QFew5hdyTilRGAAC8aMw
Message-ID: <255B9BB34FB7D647A506DC292726F6E114F4FC12D3@WSMSG3153V.srv.dir.telstra.com>
References: <20120531050148.cc40c4f3d92d2001859047cd8cabb9ab.af6dca8411.wbe@email07.europe.secureserver.net>
In-Reply-To: <20120531050148.cc40c4f3d92d2001859047cd8cabb9ab.af6dca8411.wbe@email07.europe.secureserver.net>
Accept-Language: en-US, en-AU
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: en-US, en-AU
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Subject: Re: [jose] Allow compression of plain and JWS too?
X-BeenThere: jose@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Javascript Object Signing and Encryption <jose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jose>, <mailto:jose-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/jose>
List-Post: <mailto:jose@ietf.org>
List-Help: <mailto:jose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jose>, <mailto:jose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 31 May 2012 14:01:51 -0000

> Is there a reason to have compression only with JWE?

Compression should be available in signed and unprotected messages as well. Specifying the "zip" header element for signed JWsec messages (aka JWS) and unprotected JWsec messages (aka "alg":"none") would be a good approach.


The DEFLATE algorithm does a really good job of almost eliminating the 33% overhead introduced by a base64url encoding.
* DEFLATE(B64(random)) is only 1% longer than random
* DEFLATE(B64(DEFLATE(text))) is less than 1% longer than DEFLATE(text)
* DEFLATE(B64(text)) however is significantly longer than DEFLATE(text)

--
James Manger