Re: [lamps] draft-ietf-lamps-rfc3709bis-01 security, reliability, and privacy considerations

[Russ Housley <[e-mail]>]

DKG:

>>> n) There seems to be a mismatch between the ASN.1 and the text about
>>>  whether an image must be present.  The text says yes:
>>> 
>>>     Each logotype present in a certificate MUST be represented by at least one image data object.
>>> 
>>>  but the ASN.1 seems to say that audio-only is OK:
>>> 
>>>   LogotypeData ::= SEQUENCE {
>>>      image           SEQUENCE OF LogotypeImage OPTIONAL,
>>>      audio           [1] SEQUENCE OF LogotypeAudio OPTIONAL }
>>>         -- At least one of the OPTIONAL components MUST be present
>>>         ( WITH COMPONENTS { ..., image PRESENT } |
>>>           WITH COMPONENTS { ..., audio PRESENT } )
>> 
>> This confusion remains in the document.
> 
> You are right.  Thanks for catching this.  Given the introduction of text-to-speech capability, I think the MUST statement should be changed to a SHOULD statement.
> 
> I suggest:
> 
>   Each logotype present in a certificate SHOULD be represented by at
>   least one image data object.

The I-D authors have been discussing this one, and we think it would be better to keep alignment with RFC 3709.  That is, keep the MUST statement as it is.

To make the ASN.1 match this decision is pretty straightforward:

LogotypeData ::= SEQUENCE {
   image           SEQUENCE OF LogotypeImage OPTIONAL,
   audio           [1] SEQUENCE OF LogotypeAudio OPTIONAL }
      -- At least one of the image component MUST be present
      ( WITH COMPONENTS { ..., image PRESENT } )

Russ