IETF Logo Mail Archive

Re: [saag] Interest COVID-19 'passport' standardization?

Eric Rescorla <ekr@rtfm.com> Mon, 02 August 2021 15:12 UTC

Return-Path: <ekr@rtfm.com>
X-Original-To: saag@ietfa.amsl.com
Delivered-To: saag@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D3C9B3A08C7 for <saag@ietfa.amsl.com>; Mon, 2 Aug 2021 08:12:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.296
X-Spam-Level:
X-Spam-Status: No, score=-1.296 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001, URIBL_SBL=0.5, URIBL_SBL_A=0.1] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MsC4XbSNFAyf for <saag@ietfa.amsl.com>; Mon, 2 Aug 2021 08:12:26 -0700 (PDT)
Received: from mail-il1-x132.google.com (mail-il1-x132.google.com [IPv6:2607:f8b0:4864:20::132]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 457B73A08B7 for <saag@ietf.org>; Mon, 2 Aug 2021 08:12:26 -0700 (PDT)
Received: by mail-il1-x132.google.com with SMTP id h18so16720820ilc.5 for <saag@ietf.org>; Mon, 02 Aug 2021 08:12:26 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=3v77t9un5nZxVyLYmxhS/afPfJ+AjeFfIYU14/vXkn8=; b=d5a3aOlK0dmr/f3963qa9VLItKgRonihgDrRHRUsvH7VbHJ618H9MqsG+W+2Dau1Ge 3f2uW2ID6fB7TaeNN66/G+S6OuPA8LycdSa4IOODgrvJo8ygvKdAgi81AB6UF1O3nC+t p5OMosZkXnDmTiJrP0ChgDZv3sqOl8VQjC1VNvfAcWa7XDYai+okUzwG6V1jM5HogaaI kuTm7Bpny7eQ3Tqhy61zVEtCf0Dsqb6MOX8GRMu1/EWKaY2lZ5DGHLaWeUdKZ9mFosxm 6ZWdlFpWZRkf0ohvWV8sOxaz+EvjkKx6MqjpGKnp3nY+dwBzhbY93Q0YI6rUtj53xgaS EJyg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=3v77t9un5nZxVyLYmxhS/afPfJ+AjeFfIYU14/vXkn8=; b=oLjYlKBvxu3OkBw9ArfeOXA4GquMbDmLhOH9hr8D5rbPtu7wjRnzE5e2Fm9MbMUWGr LC83m7MtSki5CyJcFBmxBHvP98Ntyr/y8nudKzinopP7o68L5+PEzU4SgJsU/Faq/Gjb exBvT5EQdKu1/NwTDc3b7n7yUHEd33tC6jAS20mojySkOv3Jl5RsChSaTOT4vXSshPPs 7d7OR55yhLs7VfjNFe8F3Qk8VwKmToO0RtrwO2i0jABO9zxBMbaqlwF2iIoRwbmZZouw iZNdZceWNf6JUcjdvJZqu64cgfFZsB1hbLJxuj/aH5A1dRfd/9xbRpUJMhMx7uuwCFO4 ngJA==
X-Gm-Message-State: AOAM531BofmcX2ujt28Aqjs5WGzl6alFQDC0lLIZDl/V+TBSAMiBSDUO mdLUM587KFDyVynGvslgFYj0F2X0f7+N04tRnQ1ajaaa+q4Tsw==
X-Google-Smtp-Source: ABdhPJw+H9TdCAcGwgnniWJ+OYoOw2lXplBlhlM5NNbtv9L4Z4UOjqukR7KBUopNX1JkBdpRbGJVxGuwcMFasvlwomc=
X-Received: by 2002:a05:6e02:f54:: with SMTP id y20mr1239400ilj.56.1627917145200; Mon, 02 Aug 2021 08:12:25 -0700 (PDT)
MIME-Version: 1.0
References: <CAE1ny+4QdmSJS-spV6Do5yDs1x3iAwyHdSx=Oa+cRXU+ESZ2nA@mail.gmail.com> <CADPMZDBu2cbtWk7Y4YMKXOWXQoKsBkAD9D1AuC_Rp+9xHawX7w@mail.gmail.com> <E0FDB1EE-256D-4925-9EE7-49DE212BFF02@gmail.com> <360C07DB-2B3A-4CDF-9747-31D2FCBABFC4@tzi.org> <8C67B77C-A2EB-4203-8713-E10CF8A12EEA@webweaving.org> <ecf66a91bb15452cb8e35266ad4f3513@oc11expo23.exchange.mit.edu> <8EC359D8-5D5F-4B26-8EEF-A0E192BAAA00@tzi.org> <CABcZeBOnN96DhE5YQcywUpXZ5xtigXxrcNfQOyjxEdQbd5iXQw@mail.gmail.com> <6185C9F3-B27C-4488-B039-2D9033A1BA10@tzi.org> <CABcZeBPU8JThKq5muXx+8mhtDACu2-ccFo0URi15W2_Oqj2ymg@mail.gmail.com> <CAHBU6isP_086oKbZ7Ai=pqfY4wcQgTLLPxWEEV-FE-1hYk-xDQ@mail.gmail.com>
In-Reply-To: <CAHBU6isP_086oKbZ7Ai=pqfY4wcQgTLLPxWEEV-FE-1hYk-xDQ@mail.gmail.com>
From: Eric Rescorla <ekr@rtfm.com>
Date: Mon, 2 Aug 2021 08:11:48 -0700
Message-ID: <CABcZeBPpC=eEN3t=MEar5NLzLe0mZuHNkNRHrYuwsfPibhqb1w@mail.gmail.com>
To: Tim Bray <tbray@textuality.com>
Cc: Carsten Bormann <cabo@tzi.org>, IETF SAAG <saag@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000029ef3205c894ffff"
Archived-At: <https://mailarchive.ietf.org/arch/msg/saag/SAWKxg2JXsUkRqVzcElcKyvXAd8>
Subject: Re: [saag] Interest COVID-19 'passport' standardization?
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/saag/>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 02 Aug 2021 15:12:31 -0000

Yeah, this is the same as the VCI ones.

On Mon, Aug 2, 2021 at 8:09 AM Tim Bray <tbray@textuality.com> wrote:

> I found this description of how the Quebec vacc passport works to be
> interesting:
> https://mikkel.ca/blog/digging-into-quebecs-proof-of-vaccination/
>
>
>
> On Mon., Aug. 2, 2021, 8:01 a.m. Eric Rescorla, <ekr@rtfm.com> wrote:
>
>>
>>
>> On Mon, Aug 2, 2021 at 7:55 AM Carsten Bormann <cabo@tzi.org> wrote:
>>
>>> On 2021-08-02, at 16:50, Eric Rescorla <ekr@rtfm.com> wrote:
>>> >
>>> > As I understand it, the payload is JSON but the wrapper is a CWT.
>>>
>>> The payload is described as being created by converting JSON to CBOR, so
>>> that’s the appearance of JSON I talked about.
>>>
>>> > it's actually quite possible to fit JSON (JWT) in  a QR code however.
>>> This is what the VCI certs look like.
>>>
>>> Of course, as with BER or XML.
>>> But if you want to have some things in there, it may get tight.
>>> (Tight enough that DGC also does a step of zlib/deflate, which is
>>> actually expanding most DGCs :-)
>>>
>>
>> I haven't studied the DGCs closely, but the VCI certificates are JWTs
>> with the inner payload being straight deflated JSON without any
>> intermediate encoding.
>>
>> -Ekr
>> _______________________________________________
>> saag mailing list
>> saag@ietf.org
>> https://www.ietf.org/mailman/listinfo/saag
>>
>

v2.8.7 | Report a Bug | By Email