IETF Logo Mail Archive

Re: [saag] Interest COVID-19 'passport' standardization?

Eric Rescorla <ekr@rtfm.com> Mon, 02 August 2021 14:51 UTC

Return-Path: <ekr@rtfm.com>
X-Original-To: saag@ietfa.amsl.com
Delivered-To: saag@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 10BDA3A076F for <saag@ietfa.amsl.com>; Mon, 2 Aug 2021 07:51:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.896
X-Spam-Level:
X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n2AGOOcSiBpv for <saag@ietfa.amsl.com>; Mon, 2 Aug 2021 07:50:58 -0700 (PDT)
Received: from mail-io1-xd29.google.com (mail-io1-xd29.google.com [IPv6:2607:f8b0:4864:20::d29]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8E4213A0769 for <saag@ietf.org>; Mon, 2 Aug 2021 07:50:58 -0700 (PDT)
Received: by mail-io1-xd29.google.com with SMTP id m13so20532718iol.7 for <saag@ietf.org>; Mon, 02 Aug 2021 07:50:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=sXEQooXv5j5E5sxXbgcFCwQi7NmN0CrvNZ/QKjRBMPo=; b=jDVE11WNh8WcGSmdyUY9UyCPRhBd3g0ijwnzI6AdWspTps24voz9oHB8NNZMhYAvnO c9WwVerUSgeI/ujFf7oLhj39moJ6LKqbFNlYX9KVqLOocmqPvZWd7OO5OkW6G5NJy1ws v9aaFCDP9PRhB2vgdV4UXMOmeaDWKgcMU1ZePjMvBx5ZKhXSHaE53hj8Q+g4yZhczytP ghBXsXHrRfpEgUNWjk3pLvE4G6NSaSdiI3IRJchL3mhi5+mOTNSjpWxUqJPDqhVjO5BH 4pOLeXoK61xbc9FSi7V6HDtLWn7Qe/aHiqjCSNYJcKNrDKObqa904IQ5PrxPiWj2mZxV bIGw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=sXEQooXv5j5E5sxXbgcFCwQi7NmN0CrvNZ/QKjRBMPo=; b=Ez4W4Xy0wMbJ3OaBsVCPWs5foVqBcF3n7UlVMuCKgKnfHRu9kcaEuDc5MARhR8rC9d 17MrTtyzFmDgkAnCGZUwGi3Pvl0v7ihQyEz64/Nh9IxA2kCjwcYAr1UUNgPE/rjUE62+ X6clZgPjcuXzXGjtx+VTS1lrfXKRbn1rjrNJlHvF7ttePk75tKbhdlgpgfp773NnlIz6 jOdDSlOACB7Qbm5bKPFjzCVPD85TEE6kwm4JvWM90nr0g1v3LDdIKeAWOoxqn+C45j73 6PKeC+tG3bJAVSd7IYnaFBxDfJNgl+xvJGsvHcvalUjqpJbkMEjYn35EsG6iVTzbSNfc RcSw==
X-Gm-Message-State: AOAM531cbfGJE5VXWo9vuZeX8LncR6Hk1PJsMx//pUdHbGMA6kReKtXB rUE6jOptkzBUhZ+Ap9bsRlkxBdj7UMRArjxLJMdcmA==
X-Google-Smtp-Source: ABdhPJwMC8V54m89YaTjZ1woxdBlDgh+KjJwAfHYYz3vSI0j4c6OEErEdCENOvJj2UQSRfi7PdAU7q6kVNBRZG+qsNE=
X-Received: by 2002:a6b:7311:: with SMTP id e17mr1301222ioh.127.1627915857584; Mon, 02 Aug 2021 07:50:57 -0700 (PDT)
MIME-Version: 1.0
References: <CAE1ny+4QdmSJS-spV6Do5yDs1x3iAwyHdSx=Oa+cRXU+ESZ2nA@mail.gmail.com> <CADPMZDBu2cbtWk7Y4YMKXOWXQoKsBkAD9D1AuC_Rp+9xHawX7w@mail.gmail.com> <E0FDB1EE-256D-4925-9EE7-49DE212BFF02@gmail.com> <360C07DB-2B3A-4CDF-9747-31D2FCBABFC4@tzi.org> <8C67B77C-A2EB-4203-8713-E10CF8A12EEA@webweaving.org> <ecf66a91bb15452cb8e35266ad4f3513@oc11expo23.exchange.mit.edu> <8EC359D8-5D5F-4B26-8EEF-A0E192BAAA00@tzi.org>
In-Reply-To: <8EC359D8-5D5F-4B26-8EEF-A0E192BAAA00@tzi.org>
From: Eric Rescorla <ekr@rtfm.com>
Date: Mon, 2 Aug 2021 07:50:21 -0700
Message-ID: <CABcZeBOnN96DhE5YQcywUpXZ5xtigXxrcNfQOyjxEdQbd5iXQw@mail.gmail.com>
To: Carsten Bormann <cabo@tzi.org>
Cc: Thomas Hardjono <hardjono@mit.edu>, IETF SAAG <saag@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000006a756305c894b26e"
Archived-At: <https://mailarchive.ietf.org/arch/msg/saag/E0R9GVV4IKk7qByaU3qVJA_rZVk>
Subject: Re: [saag] Interest COVID-19 'passport' standardization?
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/saag/>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 02 Aug 2021 14:51:03 -0000

On Mon, Aug 2, 2021 at 7:44 AM Carsten Bormann <cabo@tzi.org> wrote:

> On 2021-08-02, at 16:24, Thomas Hardjono <hardjono@MIT.EDU> wrote:
> >
> > -- JWTs and signed JSON tokens (RFC7519 and related RFCs).
>
> There were also non-functional requirements on DGC (should fit into a
> QR-Code), so the actual choice was CWTs with CBOR (no JSON(*)).
>

As I understand it, the payload is JSON but the wrapper is a CWT.

it's actually quite possible to fit JSON (JWT) in  a QR code however. This
is what the VCI certs look like.

-Ekr

v2.8.7 | Report a Bug | By Email