Re: Embedded certificate image

Peter Gutmann <pgut001@cs.auckland.ac.nz> Thu, 30 July 2009 04:40 UTC

Return-Path: <owner-ietf-pkix@mail.imc.org>
X-Original-To: ietfarch-pkix-archive@core3.amsl.com
Delivered-To: ietfarch-pkix-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 902003A688B for <ietfarch-pkix-archive@core3.amsl.com>; Wed, 29 Jul 2009 21:40:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level:
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pHAFIchW1KBU for <ietfarch-pkix-archive@core3.amsl.com>; Wed, 29 Jul 2009 21:40:09 -0700 (PDT)
Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 3636D3A6A3A for <pkix-archive@ietf.org>; Wed, 29 Jul 2009 21:40:06 -0700 (PDT)
Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id n6U4Al6V021510 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 29 Jul 2009 21:10:47 -0700 (MST) (envelope-from owner-ietf-pkix@mail.imc.org)
Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id n6U4AlW3021509; Wed, 29 Jul 2009 21:10:47 -0700 (MST) (envelope-from owner-ietf-pkix@mail.imc.org)
X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-pkix@mail.imc.org using -f
Received: from mailhost.auckland.ac.nz (curly.its.auckland.ac.nz [130.216.12.33]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id n6U4AYVY021487 for <ietf-pkix@imc.org>; Wed, 29 Jul 2009 21:10:45 -0700 (MST) (envelope-from pgut001@cs.auckland.ac.nz)
Received: from localhost (localhost.localdomain [127.0.0.1]) by mailhost.auckland.ac.nz (Postfix) with ESMTP id 5F3C06683E5; Thu, 30 Jul 2009 16:10:30 +1200 (NZST)
X-Virus-Scanned: by amavisd-new at mailhost.auckland.ac.nz
Received: from mailhost.auckland.ac.nz ([127.0.0.1]) by localhost (curly.its.auckland.ac.nz [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id q3k2fnXJTX87; Thu, 30 Jul 2009 16:10:30 +1200 (NZST)
Received: from iris.cs.auckland.ac.nz (iris.cs.auckland.ac.nz [130.216.33.152]) by mailhost.auckland.ac.nz (Postfix) with ESMTP id DF1286683D4; Thu, 30 Jul 2009 16:10:23 +1200 (NZST)
Received: from wintermute01.cs.auckland.ac.nz (wintermute01.cs.auckland.ac.nz [130.216.34.38]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by iris.cs.auckland.ac.nz (Postfix) with ESMTP id 72AB219EC0BC; Thu, 30 Jul 2009 16:10:22 +1200 (NZST)
Received: from pgut001 by wintermute01.cs.auckland.ac.nz with local (Exim 4.63) (envelope-from <pgut001@wintermute01.cs.auckland.ac.nz>) id 1MWMyE-0000cm-B5; Thu, 30 Jul 2009 16:10:22 +1200
From: Peter Gutmann <pgut001@cs.auckland.ac.nz>
To: ietf-pkix@imc.org, stefan@aaa-sec.com
Subject: Re: Embedded certificate image
In-Reply-To: <C69691F9.39D0%stefan@aaa-sec.com>
Message-Id: <E1MWMyE-0000cm-B5@wintermute01.cs.auckland.ac.nz>
Date: Thu, 30 Jul 2009 16:10:22 +1200
Sender: owner-ietf-pkix@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-pkix/mail-archive/>
List-ID: <ietf-pkix.imc.org>
List-Unsubscribe: <mailto:ietf-pkix-request@imc.org?body=unsubscribe>

Stefan Santesson <stefan@aaa-sec.com> writes:

>It seems that there are ways to store base64 encoded data in a URL. Since all
>images are located through a URL, this opens interesting possibilities if the
>URL actually contains the image data itself.

How big are these things going to get?  Anything beyond about 1024 characters
and you start running into problems with things that reject over-long URLs.

Peter.