IETF Logo Mail Archive

Re: [TLS] Abridged Certificate Compression

"Salz, Rich" <rsalz@akamai.com> Fri, 07 July 2023 20:23 UTC

Return-Path: <rsalz@akamai.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 65861C15106F; Fri, 7 Jul 2023 13:23:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.094
X-Spam-Level:
X-Spam-Status: No, score=-2.094 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sr9JuBx8Oe08; Fri, 7 Jul 2023 13:23:38 -0700 (PDT)
Received: from mx0a-00190b01.pphosted.com (mx0a-00190b01.pphosted.com [IPv6:2620:100:9001:583::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BBC1EC14CF15; Fri, 7 Jul 2023 13:23:38 -0700 (PDT)
Received: from pps.filterd (m0050095.ppops.net [127.0.0.1]) by m0050095.ppops.net-00190b01. (8.17.1.19/8.17.1.19) with ESMTP id 367Hu2D4012844; Fri, 7 Jul 2023 21:23:38 +0100
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=jan2016.eng; bh=8Y2MQYSJQoq7blcioEScsiMN12hpHv8dLG43sYTDSFw=; b=Oej+bBdDs771gYUCuLFPZ6IWT1rWmTopH6BWomZPkpGEqG6JDC2XWTKJGAfM1oZyfS7O oCxKl+sby9vkkYsQcqDRgJ4PmcgttSDf118WpFQU2tbQIs8DyaWRjG6ViLgkMINbMDaT nHtrT1Ukil/3pBt13zu6zKSmAMbZs4EBsgciTMbYlTi2qhbpgn3rVgihmZwDEIsCotpZ +kvLdmLNvTt4tNjR2hpvT9mMrwxZ1HquERgXIBgRqZrU404Q+VE3jvqeXpb51rmpF2pY pBljaPYij4VNwtn1ELt4Jxh5qW6NcSftKy1cYo6kX/mc3Cq+jdyY7EseJimYiY48afhF WA==
Received: from prod-mail-ppoint3 (a72-247-45-31.deploy.static.akamaitechnologies.com [72.247.45.31] (may be forged)) by m0050095.ppops.net-00190b01. (PPS) with ESMTPS id 3rnjwdggbw-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 07 Jul 2023 21:23:38 +0100
Received: from pps.filterd (prod-mail-ppoint3.akamai.com [127.0.0.1]) by prod-mail-ppoint3.akamai.com (8.17.1.19/8.17.1.19) with ESMTP id 367JZ6F5003725; Fri, 7 Jul 2023 16:23:37 -0400
Received: from email.msg.corp.akamai.com ([172.27.50.206]) by prod-mail-ppoint3.akamai.com (PPS) with ESMTPS id 3rk11x9svd-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 07 Jul 2023 16:23:37 -0400
Received: from ustx2ex-dag4mb4.msg.corp.akamai.com (172.27.50.203) by ustx2ex-dag4mb7.msg.corp.akamai.com (172.27.50.206) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1258.12; Fri, 7 Jul 2023 13:23:36 -0700
Received: from ustx2ex-dag4mb4.msg.corp.akamai.com ([172.27.50.203]) by ustx2ex-dag4mb4.msg.corp.akamai.com ([172.27.50.203]) with mapi id 15.02.1258.012; Fri, 7 Jul 2023 13:23:36 -0700
From: "Salz, Rich" <rsalz@akamai.com>
To: Dennis Jackson <ietf=40dennis-jackson.uk@dmarc.ietf.org>, "Salz, Rich" <rsalz=40akamai.com@dmarc.ietf.org>, TLS List <tls@ietf.org>
Thread-Topic: [TLS] Abridged Certificate Compression
Thread-Index: AQHZsFfQz7BZti18FkCYj888V3EFJ6+utbCAgACAGoD//72ggA==
Date: Fri, 07 Jul 2023 20:23:36 +0000
Message-ID: <0B08B665-30E6-4377-A54C-B3AEA2DE8FAD@akamai.com>
References: <168868149085.54562.8407395333388460548@ietfa.amsl.com> <6c2f1152-f3c1-0dfa-2f8b-784cf7f7286e@dennis-jackson.uk> <67F475B4-2CB6-44A2-9784-D1C5AC36DCE2@akamai.com> <075978a1-246e-f301-1f14-061a82f4bba7@dennis-jackson.uk>
In-Reply-To: <075978a1-246e-f301-1f14-061a82f4bba7@dennis-jackson.uk>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.73.23052000
x-originating-ip: [172.27.164.43]
Content-Type: text/plain; charset="utf-8"
Content-ID: <C4919CFBF5EFD4489E4EBFBE32CC0214@akamai.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.254,Aquarius:18.0.957,Hydra:6.0.591,FMLib:17.11.176.26 definitions=2023-07-07_14,2023-07-06_02,2023-05-22_02
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 malwarescore=0 mlxscore=0 adultscore=0 spamscore=0 phishscore=0 suspectscore=0 mlxlogscore=843 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2305260000 definitions=main-2307070187
X-Proofpoint-ORIG-GUID: ndbj1ylTXNVDso_jex9xN-r5Q-lA8QLJ
X-Proofpoint-GUID: ndbj1ylTXNVDso_jex9xN-r5Q-lA8QLJ
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.254,Aquarius:18.0.957,Hydra:6.0.591,FMLib:17.11.176.26 definitions=2023-07-07_14,2023-07-06_02,2023-05-22_02
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 malwarescore=0 adultscore=0 bulkscore=0 spamscore=0 impostorscore=0 suspectscore=0 phishscore=0 mlxlogscore=812 mlxscore=0 lowpriorityscore=0 clxscore=1015 priorityscore=1501 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2305260000 definitions=main-2307070187
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/7nwH24oTBT_egMks7O-7lRkY4H8>
Subject: Re: [TLS] Abridged Certificate Compression
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 07 Jul 2023 20:23:42 -0000

> I don't follow your comment about the handling of extensions, the code 
doing the compression and decompression isn't aware of what an extension 
is or handling them specially, its just swapping strings. In order to 
compress the larger strings which issuers add to end entity certificates

So, you're pulling out common substrings to make the dictionary more efficient.  Thanks for the explanation.

I still think it's interesting.

v2.46.0 | Report a Bug | By Email | System Status