IETF Logo Mail Archive

Re: [saag] Interest COVID-19 'passport' standardization?

Tim Bray <tbray@textuality.com> Mon, 02 August 2021 15:10 UTC

Return-Path: <tbray@textuality.com>
X-Original-To: saag@ietfa.amsl.com
Delivered-To: saag@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 62C6F3A08AE for <saag@ietfa.amsl.com>; Mon, 2 Aug 2021 08:10:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.298
X-Spam-Level:
X-Spam-Status: No, score=-1.298 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_SBL=0.5, URIBL_SBL_A=0.1] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=textuality-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1VQJUpjjEXGN for <saag@ietfa.amsl.com>; Mon, 2 Aug 2021 08:10:01 -0700 (PDT)
Received: from mail-lf1-x12f.google.com (mail-lf1-x12f.google.com [IPv6:2a00:1450:4864:20::12f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3A6BF3A08A9 for <saag@ietf.org>; Mon, 2 Aug 2021 08:10:01 -0700 (PDT)
Received: by mail-lf1-x12f.google.com with SMTP id c16so4778505lfc.2 for <saag@ietf.org>; Mon, 02 Aug 2021 08:10:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=textuality-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=ji5ffJGtEcv6c7tyDWVug9Y3QzZgMs/FfE6X0NJnOzk=; b=uTcFriiiZgzcmM2gaTbNlRodRn0tIFF85nsmNlwh6S81Sff1xl7YozYCxRJYRUEitp Quw8bFsOSU0i1xNuZ81OoiPDd3DCOv2YeRZjjinYc+gBuiVLActykGuHLXVn/5z6YyEo KTz04UVHdPXrMB6do1+q95odtfL4k3Cbh7bYcUVBRFRVEKcUjr3S0RwxcFNk1g9cVVth 5ktNPRr3F8jI7fCVPB+1U/pIlfmmyOXRycQZXkvLNs0NbX35wVjAOfgujn2RGkiXEhMH oR3tqYQ5m1EMYv9NJx9Zmbqa5I/odCbQ6qhIsjCnnfnk5yqocF8Vm7wBeq9qSYuXRawQ TL/g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=ji5ffJGtEcv6c7tyDWVug9Y3QzZgMs/FfE6X0NJnOzk=; b=Wlb0SOKyVCuWl9NjSR1AiDxnI39JMsh6wVMDj0ipOMBPLS+YNveS3haWCbEPuTtFK3 OB64iMnRNriZlO7sSQ9ppWCotIYj5qrTn22ngPd4esChDiD+fq7dUBnM+KbuoHQEytbA 5Cz8kxxHDtuADJLgr3KKRdxuKY6bUYxl2tgMGno6OVxAhwFUz4aN53grou4VaRGHThR0 ExqkHv5gsanttpJt+f5EcgMGE5KJZuf0VwP9RvaveP5wM9LOaVTjh2g/u3noyLtKVwg8 ZNhqb/xQkV1dhvg7n2SAwn0YdZUEXprb1nCzBkpLwWP04n6Labjx/kzC+ZEhNDmE2eTe 97Pw==
X-Gm-Message-State: AOAM530Jbo08xYRwroVN3sgKy/Nocq6K3I8yfFaYCxJjvC73dQ7w7LJf ANGjHhP5GgG8+qW7IUIFmjDNqOHM6e6GqcSnUhV2+ZYRY2hEQQ==
X-Google-Smtp-Source: ABdhPJyioUWitcIeO6jtSebtan4j6ozD5HflQ82asNTUlLbfteFiiSX0Cpv9KwzgtMe4Y2894i9E3YGk8s3jiUqEQcw=
X-Received: by 2002:ac2:5fe3:: with SMTP id s3mr5228143lfg.319.1627916998584; Mon, 02 Aug 2021 08:09:58 -0700 (PDT)
MIME-Version: 1.0
References: <CAE1ny+4QdmSJS-spV6Do5yDs1x3iAwyHdSx=Oa+cRXU+ESZ2nA@mail.gmail.com> <CADPMZDBu2cbtWk7Y4YMKXOWXQoKsBkAD9D1AuC_Rp+9xHawX7w@mail.gmail.com> <E0FDB1EE-256D-4925-9EE7-49DE212BFF02@gmail.com> <360C07DB-2B3A-4CDF-9747-31D2FCBABFC4@tzi.org> <8C67B77C-A2EB-4203-8713-E10CF8A12EEA@webweaving.org> <ecf66a91bb15452cb8e35266ad4f3513@oc11expo23.exchange.mit.edu> <8EC359D8-5D5F-4B26-8EEF-A0E192BAAA00@tzi.org> <CABcZeBOnN96DhE5YQcywUpXZ5xtigXxrcNfQOyjxEdQbd5iXQw@mail.gmail.com> <6185C9F3-B27C-4488-B039-2D9033A1BA10@tzi.org> <CABcZeBPU8JThKq5muXx+8mhtDACu2-ccFo0URi15W2_Oqj2ymg@mail.gmail.com>
In-Reply-To: <CABcZeBPU8JThKq5muXx+8mhtDACu2-ccFo0URi15W2_Oqj2ymg@mail.gmail.com>
From: Tim Bray <tbray@textuality.com>
Date: Mon, 2 Aug 2021 08:09:46 -0700
Message-ID: <CAHBU6isP_086oKbZ7Ai=pqfY4wcQgTLLPxWEEV-FE-1hYk-xDQ@mail.gmail.com>
To: Eric Rescorla <ekr@rtfm.com>
Cc: Carsten Bormann <cabo@tzi.org>, IETF SAAG <saag@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000006cbcde05c894f640"
Archived-At: <https://mailarchive.ietf.org/arch/msg/saag/apwpySkWuMrGb0sNnjeuhlNVyvY>
Subject: Re: [saag] Interest COVID-19 'passport' standardization?
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/saag/>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 02 Aug 2021 15:10:06 -0000

I found this description of how the Quebec vacc passport works to be
interesting:
https://mikkel.ca/blog/digging-into-quebecs-proof-of-vaccination/



On Mon., Aug. 2, 2021, 8:01 a.m. Eric Rescorla, <ekr@rtfm.com> wrote:

>
>
> On Mon, Aug 2, 2021 at 7:55 AM Carsten Bormann <cabo@tzi.org> wrote:
>
>> On 2021-08-02, at 16:50, Eric Rescorla <ekr@rtfm.com> wrote:
>> >
>> > As I understand it, the payload is JSON but the wrapper is a CWT.
>>
>> The payload is described as being created by converting JSON to CBOR, so
>> that’s the appearance of JSON I talked about.
>>
>> > it's actually quite possible to fit JSON (JWT) in  a QR code however.
>> This is what the VCI certs look like.
>>
>> Of course, as with BER or XML.
>> But if you want to have some things in there, it may get tight.
>> (Tight enough that DGC also does a step of zlib/deflate, which is
>> actually expanding most DGCs :-)
>>
>
> I haven't studied the DGCs closely, but the VCI certificates are JWTs with
> the inner payload being straight deflated JSON without any intermediate
> encoding.
>
> -Ekr
> _______________________________________________
> saag mailing list
> saag@ietf.org
> https://www.ietf.org/mailman/listinfo/saag
>

v2.8.7 | Report a Bug | By Email