search

WICG / trust-token-api

Trust Token API
https://wicg.github.io/trust-token-api/
Other
413 stars 82 forks source link

Key Commitment is NOT a "application/token-issuer-directory" resource #250

Open chris-wood opened 1 year ago

chris-wood commented 1 year ago

The issuer protocol says that key commitments have the "application/token-issuer-directory" content type, but they are fundamentally a different type of resource. This seems like it will cause much confusion and interoperability failures in practice. Please pick a new resource type, or just use the existing Privacy Pass resource type as specified.

dvorak42 commented 1 year ago

That's a fair point, we'll discuss on what mediatype to use instead for now, though I think similarly token-issuer-directory is a bit generic for specifically privacypass keys (filed #373 on the privacypass repo to discuss).