Re: [stir] "rcdi" vs MIME Content-Encoding

Orie Steele <orie@transmute.industries> Wed, 03 April 2024 01:02 UTC

Return-Path: <orie@transmute.industries>
X-Original-To: stir@ietfa.amsl.com
Delivered-To: stir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8A4AFC14F70A for <stir@ietfa.amsl.com>; Tue, 2 Apr 2024 18:02:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.085
X-Spam-Level:
X-Spam-Status: No, score=-7.085 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_MIME_MALF=0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=transmute.industries
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jlOGdIBCNcPP for <stir@ietfa.amsl.com>; Tue, 2 Apr 2024 18:01:57 -0700 (PDT)
Received: from mail-pj1-x1036.google.com (mail-pj1-x1036.google.com [IPv6:2607:f8b0:4864:20::1036]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 67B83C14F703 for <stir@ietf.org>; Tue, 2 Apr 2024 18:01:56 -0700 (PDT)
Received: by mail-pj1-x1036.google.com with SMTP id 98e67ed59e1d1-2a26cb416faso848304a91.2 for <stir@ietf.org>; Tue, 02 Apr 2024 18:01:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=transmute.industries; s=google; t=1712106116; x=1712710916; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=QeAxzQ2Et5HTti1qYc7tV0AULsOet060XxrO2eS9q0I=; b=iIbfP3LO7CRYV4qbnE8deWpet1j+yjxX4GRt7kPFytJRJuC8Kdl2oDlbo5K1tTmQ5j /ykjlMK4yazY0u7Pe3TKgCYW5R/cZlutT68zVHGcq2g+1fwAhGrVvjmMPVMbu+GwJyQY 9LsAGQyz2sSW+oABr4RdYaQiC2/d6KZLHVArQDfCKod8AGFZ/xzgcEf0uEQZZd1IG5Lo lRHwPjIGFixLRobJd+0s6hLfly/QP9c0XFh7N+XH8pA8IHOXDaikON2STuT/VxluNnHD QZaFe7In7hIcPbz89mGkaxnJiuKuNyzyBc5R2w8EQISooYMbJ4vqqjHsyCVWIh3vsc0F fSMQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1712106116; x=1712710916; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=QeAxzQ2Et5HTti1qYc7tV0AULsOet060XxrO2eS9q0I=; b=S+eoDWlhJ6vh4o2mgwesfwYJgmEUtCNc901BSSHHbP6J74xZjdoDe7jt+J41gTfQRx Pe1N+6cfICY8ZYHmeWtkO5gWQlmkgReOXt6HYRh8xcKnIgjv3/Fn3EWuIMZV0qKVVolF Fw6un8zuzZerXW8LuAbOf5EEySBHfzsHzS8w4KR0jD9JlQWXade2rjZ3YaGGIK5ri9Sq r/ekXWmkAPJwaKI0rjEDWXmZLVEGWR+aDgIvUMsACmqwFC9PChUmPwMCiqy59s+bxMnX ngeBVmxwg7YP43PaYyWpoUAsj7CrruE0xHz7hUZUQwNpGdDdatxJi8smim0s33S+RnVe 1IEg==
X-Forwarded-Encrypted: i=1; AJvYcCXIvvpv1jMRmFHzXBV6amGxcxUjZslTjf2F+uy7yE64xxGEzEvgsHkSKY+Gxl+SS85HY8o7duO0Mq4rxPFZ
X-Gm-Message-State: AOJu0YyHv3rxQnfrZdfVgb7zny541J//jY0S3F479RWOzIU/jvyXy1G1 WyVy2RcnuECY7t9ZoKyOZzQS2J4mJFCooINmPF7y7ej9ORHe3hbthJuc39kFf/LmjzMa6Dz42SH 1UPEfRe4REZrlSxq8U26kZgCq9JN5dT/WFEPL8PUSOpfOeB05OhU=
X-Google-Smtp-Source: AGHT+IFwMj+veRCS4kNBMhstJ7Z3xQWymIRpM97npa0o1gE33OmA1EY2wUxxpX3dUtxfJU55z7lDmB0q3pEoJETNCuY=
X-Received: by 2002:a17:90a:c593:b0:29f:dbdc:57df with SMTP id l19-20020a17090ac59300b0029fdbdc57dfmr11789813pjt.28.1712106115077; Tue, 02 Apr 2024 18:01:55 -0700 (PDT)
MIME-Version: 1.0
References: <E7B3FBBB-672B-4CC2-AB32-B13C7759D861@nostrum.com> <SJ2PR11MB84027F8DE9935943D8652002993F2@SJ2PR11MB8402.namprd11.prod.outlook.com> <A158B773-4100-4AB6-BB67-EB369303266F@nostrum.com> <SJ2PR11MB84028DB1EC1A6B11F1E0CEC6993F2@SJ2PR11MB8402.namprd11.prod.outlook.com> <CAN8C-_Lnfrw3Sk0pY3oE--kP1BLbYynBOMAVT=WWxK3gVD9yGw@mail.gmail.com> <718E2AB3-FF57-493D-AA92-7298818D9281@nostrum.com>
In-Reply-To: <718E2AB3-FF57-493D-AA92-7298818D9281@nostrum.com>
From: Orie Steele <orie@transmute.industries>
Date: Tue, 02 Apr 2024 20:01:42 -0500
Message-ID: <CAN8C-_LL7HT-PF9DyUbVPrsmCS7nsFAOj7foAhYhYNQpKF8Ejw@mail.gmail.com>
To: Ben Campbell <ben@nostrum.com>
Cc: Alec Fenichel <alec.fenichel=40transnexus.com@dmarc.ietf.org>, IETF STIR Mail List <stir@ietf.org>, "Peterson, Jon" <jon.peterson@transunion.com>, Chris Wendt <cwendt@somos.com>
Content-Type: multipart/alternative; boundary="000000000000ceb229061526c400"
Archived-At: <https://mailarchive.ietf.org/arch/msg/stir/5B7KkHR_c8TfrAabqsZU631Nhrw>
Subject: Re: [stir] "rcdi" vs MIME Content-Encoding
X-BeenThere: stir@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Secure Telephone Identity Revisited <stir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/stir>, <mailto:stir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/stir/>
List-Post: <mailto:stir@ietf.org>
List-Help: <mailto:stir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/stir>, <mailto:stir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 03 Apr 2024 01:02:01 -0000

You might find some of the original media type registration helpful:

https://mailarchive.ietf.org/arch/msg/media-types/ae8mKgX7vWp9-KyhMnOtDjcoQr4/

There are currently no registry entries that include multiple suffixes, but
there is a draft that proposes to enable multiple suffixes, and your
comments on the topic would be welcome on the media types list.

https://mailarchive.ietf.org/arch/msg/media-types/6XKaJ1dEgBGKcOinoMagyhMFRkQ/

OS

On Tue, Apr 2, 2024, 7:37 PM Ben Campbell <ben@nostrum.com> wrote:

> Thanks, that’s the reference that started me down this path :-)
>
> Ben.
>
> On Apr 2, 2024, at 6:12 PM, Orie Steele <orie@transmute.industries> wrote:
>
> Is this reference helpful?
>
> https://datatracker.ietf.org/doc/html/rfc9399#section-7
>
> If you believe you have a use case for multiple suffixes, like this
> example, I would like to understand it.
>
> Regards,
>
> OS
>
> On Mon, Apr 1, 2024, 4:17 PM Alec Fenichel <alec.fenichel=
> 40transnexus.com@dmarc.ietf.org> wrote:
>
>> Ben,
>>
>>
>>
>> I had not thought about this until you sent this email and this is an
>> important point, so I think it should be clarified.
>>
>>
>>
>> Sincerely,
>>
>>
>>
>> Alec Fenichel
>>
>> Chief Technology Officer
>>
>> TransNexus <https://transnexus.com/>
>>
>> alec.fenichel@transnexus.com
>>
>> +1 (404) 369-2407 <+14043692407>
>>
>>
>>
>> *From: *Ben Campbell <ben@nostrum.com>
>> *Date: *Monday, April 1, 2024 at 17:09
>> *To: *Alec Fenichel <alec.fenichel@transnexus.com>
>> *Cc: *IETF STIR Mail List <stir@ietf.org>, Peterson, Jon <
>> jon.peterson@transunion.com>, Chris Wendt <cwendt@somos.com>
>> *Subject: *Re: [stir] "rcdi" vs MIME Content-Encoding
>>
>> Yeah, I was just thinking that after sending the question.
>>
>>
>>
>> Does draft-ietf-stir-passport-rcd need to say something about
>> Content-Encoding? Or is that sufficiently understood by everyone (other
>> than myself)?
>>
>>
>>
>>
>>
>> On Apr 1, 2024, at 3:29 PM, Alec Fenichel <alec.fenichel@transnexus.com>
>> wrote:
>>
>>
>>
>> It needs to be the decoded data. At the time the rcdi is sent, the
>> content encoding is not necessarily known. A web server may support
>> multiple content encodings and return the best encoding supported by the
>> client (indicated by the Accept-Encoding header).
>>
>>
>>
>> Sincerely,
>>
>>
>>
>> Alec Fenichel
>>
>> Chief Technology Officer
>>
>> TransNexus <https://transnexus.com/>
>>
>> alec.fenichel@transnexus.com
>>
>> +1 (404) 369-2407 <+14043692407>
>>
>>
>>
>> *From: *stir <stir-bounces@ietf.org> on behalf of Ben Campbell <
>> ben@nostrum.com>
>> *Date: *Monday, April 1, 2024 at 16:21
>> *To: *IETF STIR Mail List <stir@ietf.org>
>> *Cc: *Peterson, Jon <jon.peterson@transunion.com>, Chris Wendt <
>> cwendt@somos.com>
>> *Subject: *[stir] "rcdi" vs MIME Content-Encoding
>>
>> Hi,
>>
>>
>>
>> In thinking about the “rcdi” hashes and  RCD “icn” keys:
>>
>>
>>
>> What if the target has Content-Encoding? Would the “rcdi” hash be over
>> the raw or decoded data?
>>
>>
>>
>> For example, lets say that I get the following headers when dereferencing
>> the “icn” key:
>>
>>
>>
>> Content-Type: image/svg+xml
>>
>> Content-Encoding: gzip
>>
>>
>>
>> Should the “rcdi” hash be over the compressed or uncompressed version of
>> the data? I assume since draft-ietf-stir-passport-rcd-26 does not mention
>> content-encoding, that the hash would be over the actual octets we get back
>> on the wire prior to decoding.
>>
>>
>>
>> But I see that RFC 9399 (Certificate Logotypes), which seems like a
>> similar-if-not-identical application, says the opposite for this specific
>> example:
>>
>>
>>
>> Whether the SVG image is GZIP-compressed or uncompressed, the hash value
>> for the SVG image is calculated over the uncompressed SVG content with
>> canonicalized EOL characters, as specified above.
>>
>>
>>
>> Thoughts?
>>
>>
>>
>> Thanks!
>>
>>
>>
>> Ben.
>>
>>
>> _______________________________________________
>> stir mailing list
>> stir@ietf.org
>> https://www.ietf.org/mailman/listinfo/stir
>>
>
>