-
Notifications
You must be signed in to change notification settings - Fork 19
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add protocol statements related to pub/sub of status lists. #107
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Approving w/Ted's suggestions.
Co-authored-by: Ted Thibodeau Jr <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Using the latest JOSE/COSE draft spec
secured with SD-JWT might have content-type `application/sd-jwt`. | ||
For example, a verifiable credential secured with Data Integrity Proofs might | ||
have media type `application/vc+ld+json`, while a verifiable credential | ||
secured with SD-JWT might have media type `application/sd-jwt`. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
secured with SD-JWT might have media type `application/sd-jwt`. | |
secured with SD-JWT might have media type `application/vc+ld+json+sd-jwt`. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There doesn't seem to be consensus on this media type in the latest JOSE COSE spec.
Normative, multiple reviews, changes requested and made, remaining change not applied with an explanation, no objections, merging. |
This PR is being raised to address issue #44 by stating that HTTPS should be used to publish status lists and protocols like OHTTP should be used to retrieve status lists.
These normative statements are untestable, so we might want to downgrade this language to advisement in the privacy considerations sections.
Preview | Diff