decentralized-identity / decentralized-identity/presentation-exchange

Credential revocation unable to be expressed as a field constraint

Open
#151 3 comments 1 reaction 1 assignee Claimed by @csuwildcat View on GitHub
Dominant language
JavaScript
Stars
88
Forks
35
PR merge metrics
No merged PRs in 30d

Description

Some credential revocation techniques means that the credential it self does not contain a data element (or field) that is directly revealed when proving whether the credential is revoked or not, instead it can be more associated to the digital signature that is used, e.g as is the case with BBS+ or CL signatures, therefore using a field constraint to express this intent in the request is unsuitable in these cases.

My suggestion is that revocation should be regarded as its own type of constraint rather than as a field constraint, this would manifest as something like the following

```
"constraints": {
"limit_disclosure": true,
"revocation": {
..... information pertaining to the revocation constraint the requestor is placing
},
"fields": []
}
```

The information that needs to be communicated in the revocation block (or else where in the request) is
1. What revocation schemes the requesting party (verifier) supports.
2. What revocation information the verifier is requesting about the credential (e.g does requesting a non-revoked credential mean that credentials that don't include revocation information are included?)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.