eu-digital-identity-wallet / eudi-doc-architecture-and-reference-framework

The European Digital Identity Wallet
https://eu-digital-identity-wallet.github.io/eudi-doc-architecture-and-reference-framework/
Other
431 stars 60 forks source link

Anchors removal will be detrimental if an audit is performed #239

Open GSMA-EIG opened 4 months ago

GSMA-EIG commented 4 months ago

§ 6.3.3: “For PID Providers, QEAA Providers and PuB-EAA Providers, suspension or withdrawal also implies that their trust anchors are taken off the Trusted List. As a result, Relying Parties will no longer trust PIDs or attestations issued by the suspended or withdrawn Provider. The applicable Rulebook (see [Topic 12]) may define additional mechanisms ensuring that Relying Parties will no longer trust the trust anchors of EAA Providers that have been suspended or withdrawn”. If anchors are removed from the Trusted list, how is it possible to prove that passed transactions were actually valid in case of an audit? This shall be clarified.