You are viewing a single comment's thread.

view the rest of the comments →

Judgejewdy ago

Vcards aren't private and are pretty common. Unless they have some kind of special "version" that contains secret data, don't think there's anything here. But I'm not an IT guy so maybe someone who is can chime in.

ArtificalDuality ago

I looked at the vCard specification protocol:

https://tools.ietf.org/html/rfc6350

Yes, the format allows any kind of data. There are pre-defined fields. But it also allows an XML field which allows for arbitrary data to be tagged on. Through Base64 encoding any type of binary encrypted data can be tagged along with the vCard.

So yes, the protocol allows for communication of encrypted data. The XML field is not shown in most apps and would require a specialized app that will offer access to the XML fields. Simple address book apps will likely not do anything with the XML field.

P.S. I can make an app that will read the XML sections from exported vCards and save them to actual XML files for further processing. Cryptographers can then have at it if there's any encoded data found in them.