search

w3c-ccg / universal-wallet-interop-spec

A data model and abstract interfaces for digital wallets
http://w3id.org/wallet
Other
56 stars 13 forks source link

Data Sanitization #34

Open OR13 opened 3 years ago

OR13 commented 3 years ago

It should be possible to "show your wallet contents" to another party, without loosing any controlling authority that comes from any secret (private) information in wallet contents.

Doing so will of course allow that party to track you everywhere you use any public components of the content, but that party should not be able to impersonate you, or decrypt messages intended for you.

TelegramSam commented 3 years ago

Can you explain the purpose behind such a feature?

OR13 commented 3 years ago

@TelegramSam yep, essentially "keypairs" have private keys, but showing them is dangerous... what if you could automatically ask for data models that are "safe to share" in that they reveal correlation, but don't lead to compromise.

This could be accomplished by being smarter about the security context associated with certain members, such as privateKeyBase58 or mnemonic.value

OR13 commented 3 years ago

JSON Schema for type matching would help identify content that should be filtered properly.