diff --git a/common.js b/common.js index 481be3ef6..d1b009a65 100644 --- a/common.js +++ b/common.js @@ -82,6 +82,13 @@ var vcwg = { authors: ['Daniel Buchner', 'Brent Zundel', 'Martin Riedel', 'Kim Hamilton Duffy'], status: 'DIF Ratified Specification', publisher: 'Decentralized Identity Foundation' + }, + 'OHTTP': { + title: 'Oblivious HTTP ', + href: 'https://datatracker.ietf.org/doc/html/draft-ietf-ohai-ohttp', + authors: ['Martin Thomson', 'Christopher A. Wood'], + status: 'Working Group Draft', + publisher: 'IETF Oblivious HTTP Application Intermediation' } } }; diff --git a/index.html b/index.html index e90ba2830..cac572850 100644 --- a/index.html +++ b/index.html @@ -4385,7 +4385,7 @@

Long-Lived Identifier-Based Correlation

-

Device Fingerprinting

+

Device Tracking and Fingerprinting

There are mechanisms external to verifiable credentials that are used to @@ -4406,6 +4406,36 @@

Device Fingerprinting

In some cases, tracking technologies might need to be disabled on devices that transmit verifiable credentials on behalf of a holder.

+ +

+The Oblivious HTTP protocol [[?OHTTP]] is one mechanism that implementers might +consider using when fetching external resources that are associated with a +verifiable credential or a verifiable presentation. +Oblivious HTTP allows a client to make multiple requests to an origin server +without that server being able to link those requests to that client or even to +identify those requests as having come from a single client, while placing only +limited trust in the nodes used to forward the messages. Hence, Oblivious HTTP +is one privacy-preserving mechanism that can be used to reduce the possibility +of device tracking and fingerprinting. Concrete examples for how Oblivious HTTP +can benefit ecosystem participants are included below. +

+ +