w3c / vc-bitstring-status-list

A privacy-preserving mechanism to publish status information for Verifiable Credentials.
https://w3c.github.io/vc-bitstring-status-list/
Other
22 stars 19 forks source link

Align bitstring structure and IETF Token Status List structure? #93

Open brentzundel opened 10 months ago

brentzundel commented 10 months ago

There is work underway at IETF to define a status list, delivered as a JWT/CWT. From my understanding, it closely matches the efforts underway here to define a status list, delivered as a VC.

As far as possible, the underlying bytestring structure and status tracking algorithms of both approaches need to be identical. This would have significant benefits for implementers.

There is an issue open to track this concern on the IETF side as well.

msporny commented 9 months ago

PR #119 has been raised to partially address this issue. This issue will be closed (or will be marked as "during CR") once PR #119 has been merged.

msporny commented 8 months ago

PR #119 has been merged, removing "before-CR" label and adding "during-CR" label.

TallTed commented 8 months ago

Both our text and IETF's should include mention of where the least-significant and/or most-significant bit is (leftmost or rightmost), similar to what NIST has (regrettably, different text in different docs) --

iherman commented 11 hours ago

The issue was discussed in a meeting on 2024-09-27

View the transcript #### 4.4. Align bitstring structure and IETF Token Status List structure? (issue vc-bitstring-status-list#93) _See github issue [vc-bitstring-status-list#93](https://github.com/w3c/vc-bitstring-status-list/issues/93)._ **Manu Sporny:** First issue is aligning the bitstring structure with the token status list structure at IETF. … We all agree alignment would be great. I do not know the status of this alignment. … At this point, we are either aligned or not. I don't know how much energy there is to change the structure of the statuslist. … Be great to hear from the group. **Brent Zundel:** The associated issue tracking this on IETF side is still open, but the last I heard was there was too great a drift. There i no IETF appetite for alignment. … So we either do extactly what they did, or we continue with what we have. … Option A: is to do nothing. … Option B is to do a lot of work to align with IETF. But no gaurantee that their spec is stable. > *Joe Andrieu:* +1 to option A. the effort feels unnecessary and likely unproductive. **Brent Zundel:** For B we would be effectively having a normative reference of their specification. … I am fine if this issue would be closed. **Manu Sporny:** As DB, we have implemented what is currently in the spec. We have no interest in changing this. … So +1 for option A. **Brent Zundel:** Marking it with pending close. … Any additional issues? **Manu Sporny:** 2 issues 175 and 176. … Around status messages and status size.