Require cryptosuite specifications to mitigate against poison graphs.

w3c / vc-data-integrity

W3C Data Integrity Specification

https://w3c.github.io/vc-data-integrity/

Other

42 stars 18 forks source link

Require cryptosuite specifications to mitigate against poison graphs. #128

Closed msporny closed 1 year ago

msporny commented 1 year ago

This PR attempts to address issue #87 by 1) documenting that some transformations (like RDF Dataset Canonicalization) can be attacked, and 2) that there are mitigations for those attacks and cryptosuite specifications MUST ensure that those mitigations are implemented.

Preview | Diff

msporny commented 1 year ago

Normative, multiple reviews, changes requested and made, no objections, merging.