Hi Tim

On Thu, Jan 11, 2024 at 05:02:01PM -0600, Tim Starr via mailop wrote:
> The image has to be specified in the DNS, and it has to be certified w/ a
> VMC. The VMC certification process includes checking if it's trademarked.

That's why the process started with: get a trademark.  Also such a check
is manual work, so pretty weak.

I found
https://datatracker.ietf.org/doc/html/draft-fetch-validation-vmc-wchuang,
which seems reasonably okay.  Just the requirement to use HTTPS to fetch
such a document and use CRL stand out.

And to answer my other question:  The VMC certificate actually embeds
the image itself.

Bastian

PS: Please don't send me copies of e-mails.  I explicitly set
Mail-Followup-To in mine.
-- 
Immortality consists largely of boredom.
                -- Zefrem Cochrane, "Metamorphosis", stardate 3219.8
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Reply via email to