Closed atoulme closed 2 years ago
@atoulme sorry overlooked this. Answer: No ... most credentials are not self-issued but rather issued by a 3rd party e.g. DMV. CR4>D11 just states that
CR4]>[D11]
Generating key pairs in a BPI on behalf of the Principal Owner MUST NOT be allowed.
which only refers to keys and not credentials. Keys are used to signing credentials.
Question answered. Closing issue
D13 states:
Note that credentials utilized within one or more BPIs may be self-issued.
Isn't that what CR4>D11 implies though? All credentials must be generated by the principal owner.