Re: [stir] "rcdi" vs MIME Content-Encoding

Ben Campbell <ben@nostrum.com> Wed, 03 April 2024 16:30 UTC

Return-Path: <ben@nostrum.com>
X-Original-To: stir@ietfa.amsl.com
Delivered-To: stir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6E46EC14F69C; Wed, 3 Apr 2024 09:30:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.183
X-Spam-Level:
X-Spam-Status: No, score=0.183 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_DISCARD=1.8, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, KHOP_HELO_FCRDNS=0.048, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, T_MIME_MALF=0.01, T_SPF_HELO_PERMERROR=0.01, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=fail (1024-bit key) reason="fail (message has been altered)" header.d=nostrum.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JQLIjtArAZ0w; Wed, 3 Apr 2024 09:30:20 -0700 (PDT)
Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 29F19C14F68C; Wed, 3 Apr 2024 09:30:20 -0700 (PDT)
Received: from smtpclient.apple (070-120-133-087.res.spectrum.com [70.120.133.87]) (authenticated bits=0) by nostrum.com (8.18.1/8.18.1) with ESMTPSA id 433GUH6j078941 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Wed, 3 Apr 2024 11:30:18 -0500 (CDT) (envelope-from ben@nostrum.com)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nostrum.com; s=default; t=1712161818; bh=Y+KmdKzz+yfExk4vnRAXZTkpG+JJ9WPG6PQrkbjit5g=; h=From:Subject:Date:In-Reply-To:Cc:To:References; b=GOm8/HMFVPMLalDgy152xi5f83qUDkLp6q0xNXtl0gRpKIgvBpQcbz/gBeuu+/e8j WhYQ+RefhpDPxBd8+FIar0ye3rnGrZgRks5AAi/zXNkXQZXvdjFGaB+m5YZeyu7Wpc HRDSt380Xh15yxAEdiXlYIVlDdhsc8N+hpWchiXY=
X-Authentication-Warning: raven.nostrum.com: Host 070-120-133-087.res.spectrum.com [70.120.133.87] claimed to be smtpclient.apple
From: Ben Campbell <ben@nostrum.com>
Message-Id: <8625AFE9-B606-4674-ADDB-94AB6CAE207C@nostrum.com>
Content-Type: multipart/signed; boundary="Apple-Mail=_4D020B7F-5839-48B9-AA5A-78E011877320"; protocol="application/pgp-signature"; micalg="pgp-sha512"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3774.500.171.1.1\))
Date: Wed, 03 Apr 2024 11:30:12 -0500
In-Reply-To: <FBE9000C-F76D-401C-B78E-FD8097AF3EF2@nostrum.com>
Cc: Orie Steele <orie@transmute.industries>, Alec Fenichel <alec.fenichel=40transnexus.com@dmarc.ietf.org>, IETF STIR Mail List <stir@ietf.org>, "Peterson, Jon" <jon.peterson@transunion.com>, Chris Wendt <cwendt@somos.com>
To: Pierce Gorman <Pierce.Gorman@numeracle.com>
References: <E7B3FBBB-672B-4CC2-AB32-B13C7759D861@nostrum.com> <SJ2PR11MB84027F8DE9935943D8652002993F2@SJ2PR11MB8402.namprd11.prod.outlook.com> <A158B773-4100-4AB6-BB67-EB369303266F@nostrum.com> <SJ2PR11MB84028DB1EC1A6B11F1E0CEC6993F2@SJ2PR11MB8402.namprd11.prod.outlook.com> <CAN8C-_Lnfrw3Sk0pY3oE--kP1BLbYynBOMAVT=WWxK3gVD9yGw@mail.gmail.com> <718E2AB3-FF57-493D-AA92-7298818D9281@nostrum.com> <CH3PR13MB6747D5CA5599F9759EB0EB4EE13D2@CH3PR13MB6747.namprd13.prod.outlook.com> <FBE9000C-F76D-401C-B78E-FD8097AF3EF2@nostrum.com>
X-Mailer: Apple Mail (2.3774.500.171.1.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/stir/6Wv_azwQcCJm9B28ZKbzpJ-5zrg>
Subject: Re: [stir] "rcdi" vs MIME Content-Encoding
X-BeenThere: stir@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Secure Telephone Identity Revisited <stir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/stir>, <mailto:stir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/stir/>
List-Post: <mailto:stir@ietf.org>
List-Help: <mailto:stir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/stir>, <mailto:stir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 03 Apr 2024 16:30:24 -0000

Oops, I forgot to add that TS 26.141 is about messaging and presence applications, not voice calling per se. (But it does seem likely that requirements overlap.)

Thanks!

Ben.

> On Apr 3, 2024, at 11:22 AM, Ben Campbell <ben@nostrum.com> wrote:
> 
> Signed PGP part
> Hi Pierce,
> 
> On a quick scan, I don’t see anything in RCC.07 or RCC.20 that bears on icon formats. But I did find some in 3GPP TS 26.141 that is not too far off from what is in RFC 9399.
> 
> (Does anyone use GIF for static images anymore?)
> 
> I think the interesting point of RFC 9399 is that logotype images are used with external content with signed hashes, which seems pretty close to the RCD application. 
> 
> 
> Thanks!
> 
> Bne.
> 
>> On Apr 3, 2024, at 8:25 AM, Pierce Gorman <Pierce.Gorman@numeracle.com <mailto:Pierce.Gorman@numeracle.com>> wrote:
>> 
>> RFC 9399 would be more useful if it were adopted by wireless service providers and mobile device manufacturers who can be very particular about audio/video codec and image formats they will support.
>>  
>> Generally, the wireless service provider and mobile device manufacturer community pays more attention to content formats defined by 3GPP (e.g., AMR, AMR-WB, EVS) and GSMA than they do recommendations from the IETF.   E.g., GSMA published the RCC.07 and RCC.20 specifications that have been influential in defining Rich Communication Services (RCS) content formats which have been adopted more or less globally by mobile device manufacturers.
>>  
>> Pierce
>>  
>> From: Ben Campbell <ben@nostrum.com <mailto:ben@nostrum.com>>
>> Sent: Tuesday, April 2, 2024 7:38 PM
>> To: Orie Steele <orie@transmute.industries <mailto:orie@transmute.industries>>
>> Cc: Alec Fenichel <alec.fenichel=40transnexus.com@dmarc.ietf.org <mailto:alec.fenichel=40transnexus.com@dmarc.ietf.org>>; IETF STIR Mail List <stir@ietf.org <mailto:stir@ietf.org>>; Peterson, Jon <jon.peterson@transunion.com <mailto:jon.peterson@transunion.com>>; Chris Wendt <cwendt@somos.com <mailto:cwendt@somos.com>>
>> Subject: Re: [stir] "rcdi" vs MIME Content-Encoding
>>  
>> Thanks, that’s the reference that started me down this path :-)
>>  
>> Ben.
>> 
>> 
>> On Apr 2, 2024, at 6:12 PM, Orie Steele <orie@transmute.industries <mailto:orie@transmute.industries>> wrote:
>>  
>> Is this reference helpful?
>>  
>> https://datatracker.ietf.org/doc/html/rfc9399#section-7
>>  
>> If you believe you have a use case for multiple suffixes, like this example, I would like to understand it.
>>  
>> Regards,
>>  
>> OS
>>  
>> On Mon, Apr 1, 2024, 4:17 PM Alec Fenichel <alec.fenichel=40transnexus.com@dmarc.ietf.org <mailto:40transnexus.com@dmarc.ietf.org>> wrote:
>> Ben,
>>  
>> I had not thought about this until you sent this email and this is an important point, so I think it should be clarified.
>>  
>> Sincerely,
>>  
>> Alec Fenichel
>> Chief Technology Officer
>> TransNexus <https://transnexus.com/>
>> alec.fenichel@transnexus.com <mailto:alec.fenichel@transnexus.com>
>> +1 (404) 369-2407 <tel:+14043692407>
>>  
>> From: Ben Campbell <ben@nostrum.com <mailto:ben@nostrum.com>>
>> Date: Monday, April 1, 2024 at 17:09
>> To: Alec Fenichel <alec.fenichel@transnexus.com <mailto:alec.fenichel@transnexus.com>>
>> Cc: IETF STIR Mail List <stir@ietf.org <mailto:stir@ietf.org>>, Peterson, Jon <jon.peterson@transunion.com <mailto:jon.peterson@transunion.com>>, Chris Wendt <cwendt@somos.com <mailto:cwendt@somos.com>>
>> Subject: Re: [stir] "rcdi" vs MIME Content-Encoding
>> 
>> Yeah, I was just thinking that after sending the question.
>>  
>> Does draft-ietf-stir-passport-rcd need to say something about Content-Encoding? Or is that sufficiently understood by everyone (other than myself)?
>>  
>>  
>> On Apr 1, 2024, at 3:29 PM, Alec Fenichel <alec.fenichel@transnexus.com <mailto:alec.fenichel@transnexus.com>> wrote:
>>  
>> It needs to be the decoded data. At the time the rcdi is sent, the content encoding is not necessarily known. A web server may support multiple content encodings and return the best encoding supported by the client (indicated by the Accept-Encoding header).
>>  
>> Sincerely,
>>  
>> Alec Fenichel
>> Chief Technology Officer
>> TransNexus <https://transnexus.com/>
>> alec.fenichel@transnexus.com <mailto:alec.fenichel@transnexus.com>
>> +1 (404) 369-2407 <tel:+14043692407>
>>  
>> From: stir <stir-bounces@ietf.org <mailto:stir-bounces@ietf.org>> on behalf of Ben Campbell <ben@nostrum.com <mailto:ben@nostrum.com>>
>> Date: Monday, April 1, 2024 at 16:21
>> To: IETF STIR Mail List <stir@ietf.org <mailto:stir@ietf.org>>
>> Cc: Peterson, Jon <jon.peterson@transunion.com <mailto:jon.peterson@transunion.com>>, Chris Wendt <cwendt@somos.com <mailto:cwendt@somos.com>>
>> Subject: [stir] "rcdi" vs MIME Content-Encoding
>> 
>> Hi,
>>  
>> In thinking about the “rcdi” hashes and  RCD “icn” keys:
>>  
>> What if the target has Content-Encoding? Would the “rcdi” hash be over the raw or decoded data?
>>  
>> For example, lets say that I get the following headers when dereferencing the “icn” key:
>>  
>> Content-Type: image/svg+xml
>> Content-Encoding: gzip
>>  
>> Should the “rcdi” hash be over the compressed or uncompressed version of the data? I assume since draft-ietf-stir-passport-rcd-26 does not mention content-encoding, that the hash would be over the actual octets we get back on the wire prior to decoding. 
>>  
>> But I see that RFC 9399 (Certificate Logotypes), which seems like a similar-if-not-identical application, says the opposite for this specific example:
>>  
>> Whether the SVG image is GZIP-compressed or uncompressed, the hash value for the SVG image is calculated over the uncompressed SVG content with canonicalized EOL characters, as specified above.
>> 
>>  
>> Thoughts?
>>  
>> Thanks!
>>  
>> Ben.
>>  
>> _______________________________________________
>> stir mailing list
>> stir@ietf.org <mailto:stir@ietf.org>
>> https://www.ietf.org/mailman/listinfo/stir
> 
> _______________________________________________
> stir mailing list
> stir@ietf.org <mailto:stir@ietf.org>
> https://www.ietf.org/mailman/listinfo/stir