IETF Logo Mail Archive

Re: [saag] Interest COVID-19 'passport' standardization?

Eric Rescorla <ekr@rtfm.com> Mon, 02 August 2021 15:01 UTC

Return-Path: <ekr@rtfm.com>
X-Original-To: saag@ietfa.amsl.com
Delivered-To: saag@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 32D663A081C for <saag@ietfa.amsl.com>; Mon, 2 Aug 2021 08:01:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.896
X-Spam-Level:
X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BbyrjyM8YCeY for <saag@ietfa.amsl.com>; Mon, 2 Aug 2021 08:01:05 -0700 (PDT)
Received: from mail-io1-xd2a.google.com (mail-io1-xd2a.google.com [IPv6:2607:f8b0:4864:20::d2a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 451013A005F for <saag@ietf.org>; Mon, 2 Aug 2021 08:01:05 -0700 (PDT)
Received: by mail-io1-xd2a.google.com with SMTP id f11so20570739ioj.3 for <saag@ietf.org>; Mon, 02 Aug 2021 08:01:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=+OHEemo+Tlj0FLaBpB11wClW8tzNcw/5xUJxclCXWeg=; b=esXcQ/m8TMNB03HT9B9A4XxKETz4vAhDAbJouNqUX62oOxkuycV/cqIQiQVDYLmmB2 CNiszClLeFuUGlRNJ2U3qdBrNAV9BTbaQ4EIGv5KcJs/5gECtew9vVWuSd4989LjLPSD xkTHorNmxHFWOX2ADS2Nei09ARyV4jx0uwxhGWLqGLt72jWUB6+czpmWuBT25XP51jYe LpVUUyD/h1VsMwm4yqa6lg381LjjMHE5ZooS++Z16oVJO9w2zs90Fc+3wZj/CtDi4EtK Y8xjOP1KqqJW9Diprww9bqSk91mmkd1rTaPNosySPjEnK5VdJU3m6nnNfBRRJijsyF3n ckkw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=+OHEemo+Tlj0FLaBpB11wClW8tzNcw/5xUJxclCXWeg=; b=MYE2+XNNpzsZCPpDLcgIejY4C8I2KPg22lNL0qWp/rUsuPDBLMuOvqbCJ6AA8eNcpR QSxjK92X+mqYpztSNXmCmtibBW/i4nDW8jqfibz2wW9f/PANhJKuwHfAEgcsowBbFG6Z d5sSLe6KeREwCaoG4A01tNTBywce8IbvYZTBgrFIykDAJm9//N4Kxh4q5gbk5yuMNthi Rxlz8gP6Bn4RU2ed2NiO94COo/1Q9f6KFCnBSrCI16ZGSTeqavHLu8jc0xuOhl78ciRe ZwIl4dtaTP7A+SGfJXYeaFYIV4/vMzAsOtYuLCYzMfpQkA37i4WuGv3cAVLf4LT1vfD+ GlvQ==
X-Gm-Message-State: AOAM533L7FKR/o511taJQ/6ikU5dNIpZmYfijmMuhHLbHZzbux7DLks1 EKYkAbHZGVkmlAHceKLUtcCafo+mllgeS4Lr6BjhEQ==
X-Google-Smtp-Source: ABdhPJz3BEDwcQKYMz+ytvFWXEU9T1/vpumzAoEhZjb/JLHsdNU/SehO3O7k37+RgA0CoarWYnNcSCJWRY6F0L/PoGk=
X-Received: by 2002:a05:6638:2656:: with SMTP id n22mr15107045jat.64.1627916462844; Mon, 02 Aug 2021 08:01:02 -0700 (PDT)
MIME-Version: 1.0
References: <CAE1ny+4QdmSJS-spV6Do5yDs1x3iAwyHdSx=Oa+cRXU+ESZ2nA@mail.gmail.com> <CADPMZDBu2cbtWk7Y4YMKXOWXQoKsBkAD9D1AuC_Rp+9xHawX7w@mail.gmail.com> <E0FDB1EE-256D-4925-9EE7-49DE212BFF02@gmail.com> <360C07DB-2B3A-4CDF-9747-31D2FCBABFC4@tzi.org> <8C67B77C-A2EB-4203-8713-E10CF8A12EEA@webweaving.org> <ecf66a91bb15452cb8e35266ad4f3513@oc11expo23.exchange.mit.edu> <8EC359D8-5D5F-4B26-8EEF-A0E192BAAA00@tzi.org> <CABcZeBOnN96DhE5YQcywUpXZ5xtigXxrcNfQOyjxEdQbd5iXQw@mail.gmail.com> <6185C9F3-B27C-4488-B039-2D9033A1BA10@tzi.org>
In-Reply-To: <6185C9F3-B27C-4488-B039-2D9033A1BA10@tzi.org>
From: Eric Rescorla <ekr@rtfm.com>
Date: Mon, 2 Aug 2021 08:00:26 -0700
Message-ID: <CABcZeBPU8JThKq5muXx+8mhtDACu2-ccFo0URi15W2_Oqj2ymg@mail.gmail.com>
To: Carsten Bormann <cabo@tzi.org>
Cc: Thomas Hardjono <hardjono@mit.edu>, IETF SAAG <saag@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000007e0f9505c894d6fa"
Archived-At: <https://mailarchive.ietf.org/arch/msg/saag/h0V0q9o1F6RuTyv90JKd9wS3tMA>
Subject: Re: [saag] Interest COVID-19 'passport' standardization?
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/saag/>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 02 Aug 2021 15:01:12 -0000

On Mon, Aug 2, 2021 at 7:55 AM Carsten Bormann <cabo@tzi.org> wrote:

> On 2021-08-02, at 16:50, Eric Rescorla <ekr@rtfm.com> wrote:
> >
> > As I understand it, the payload is JSON but the wrapper is a CWT.
>
> The payload is described as being created by converting JSON to CBOR, so
> that’s the appearance of JSON I talked about.
>
> > it's actually quite possible to fit JSON (JWT) in  a QR code however.
> This is what the VCI certs look like.
>
> Of course, as with BER or XML.
> But if you want to have some things in there, it may get tight.
> (Tight enough that DGC also does a step of zlib/deflate, which is actually
> expanding most DGCs :-)
>

I haven't studied the DGCs closely, but the VCI certificates are JWTs with
the inner payload being straight deflated JSON without any intermediate
encoding.

-Ekr

v2.8.7 | Report a Bug | By Email