Re: Embedded certificate image

[Stefan Santesson <stefan@xxxxxxxxxxx>]

Title: Re: Embedded certificate image

Jim Schaad provided a very interesting idea to this issue at PKIX today

It seems that there are ways to store base64 encoded data in a URL. Since all images are located through a URL, this opens interesting possibilities if the URL actually contains the image data itself.

I think it could make sense in many situations and environments to provide the image inside the certificate in this form.

Russ came up with a concern that all hash attacks loves big chunks of random data that can be used to create collisions. Counter arguments is that this is only a concern is a week hash is used and also that the data has some structure as it is base64 encoded.

Jim, could you provide more specific information about the underlying specification that would enable this?

/Stefan