creator-assertions / identity-assertion

Creator Assertions Working Group :: Identity Assertion
https://creator-assertions.github.io/identity/
Other
6 stars 7 forks source link

Possible interaction in "multiple step processing" #63

Closed paulengland closed 2 months ago

paulengland commented 7 months ago

The C2PA main spec describes multi-step processing to minimize padding. I'm not sure that this will work if an identity assertion has already encoded/fixed file offsets

scouten-adobe commented 6 months ago

Wording is not entirely clear. Also revisit with @lrosenthol to ensure that C2PA spec itself is sufficiently clear.

scouten-adobe commented 5 months ago

Follow up with C2PA 2.0 specification to ensure that it supports cases where file offsets are required. This may be more of a C2PA issue.

paulengland commented 5 months ago

I filed an issue against the main spec for this: https://github.com/c2pa-org/specs-core/issues/1234

We may or may not want to have text in this spec similar to https://github.com/c2pa-org/specs-core/issues/1234 in the ID assertion spec. We may also want to have a note in this spec like:

NOTE: For some asset file/container formats and content binding assertions, the file layout may no longer be changeable after the ID assertion is signed. Claim Generators should ensure that sufficient padding is available so that no major changes to the file layout are needed once the first ID assertion has been signed.

scouten-adobe commented 2 months ago

I think we've addressed the CAWG portion of this with #119 and the remainder rightly belongs with C2PA and the issue you've filed there. Closing.