Closed bluesteens closed 10 months ago
Affected Parties (help determine Sunrise/Sunset):
Mtg July 27: also consider specifying what happens to rotated keys (deleted, retired)
consider adding that key rotation is only required for PROD accounts/usage
14.9. P&A: edits to make text work for both DID methods persisted in the DID document = discoverable via the DID document
Steering summary: Unclear wording around wallet security aspects. Suggest to reword to avoid ambiguity.
It is not entirely clear whether this NFR is to deals only with keys in relation to the DID document or also provider app-specific security.
It says under Conformance Criteria
The last bullet reads as if it was meant to address sth like API keys for a provider app. The rest seems to apply to DID docs.
OCI should consider splitting both scopes into 2 NFR or making it clearer within this 004 what is meant.