privacybydesign / irmamobile

IRMA app for iOS and Android
Other
81 stars 20 forks source link

Disjunction labels not shown #288

Closed DeD1rk closed 2 months ago

DeD1rk commented 2 months ago

The disjunction labels (https://irma.app/docs/session-requests/#disjunction-labels) in a session request are not shown or otherwise used in the Yivi app (but they are passed as RequestIssuancePermissionSessionEvent.disclosuresLabels).

Is this feature deprecated, or should it still be implemented on the Yivi app?

ivard commented 2 months ago

This was intentionally deprecated indeed, because it could be misused by verifiers to mask which data a verifier is requesting. For example, when requesting a BSN the verifier could add the label This data is not shared. Then, the user might not be aware that he is actually sharing the information.