search

w3c / vc-data-integrity

W3C Data Integrity Specification
https://w3c.github.io/vc-data-integrity/
Other
41 stars 18 forks source link

Add Privacy Consideration for previous signers in proof chains #168

Closed msporny closed 11 months ago

msporny commented 1 year ago

From the PING's review (https://github.com/w3cping/privacy-request/issues/120):

When using a proof chain, secondary signers get to know who previous signers are. Which would reveal the same issuer based correlation as highlighted in issue 2 of the VC data model review in https://github.com/w3cping/privacy-request/issues/121#issuecomment-1638908803. This is not an issue with proof sets because each proof can be independently generated and combined during the verifiable presentation. For this reason, a privacy considerations section should be added to highlight this trust of data being shared between issuers when proof chains are used.

/cc @kdenhartog

msporny commented 12 months ago

Yes, we can add this to the privacy considerations section.

msporny commented 12 months ago

PR #198 has been raised to address this issue. This issue will be closed once PR #198 has been merged.

msporny commented 11 months ago

PR #198 has been merged, closing.