search

w3c / vc-data-integrity

W3C Data Integrity Specification
https://w3c.github.io/vc-data-integrity/
Other
40 stars 18 forks source link

Explain that data integrity secures underlying RDF graph #215

Closed Sakurann closed 2 months ago

Sakurann commented 10 months ago

This article explains it much better, but please add to the document (probably introduction?) that "data integrity" secures an RDF graph underlying the JSON document, as opposed to securing the JSON document itself and that it is an expected behavior that "the signature value does not change even if the JSON document changes as long as an underlying RDF graph does not change". https://medium.com/@markus.sabadello/json-ld-vcs-are-not-just-json-4488d279be43

selfissued commented 10 months ago

I agree that this should be done.

dlongley commented 10 months ago

"data integrity" secures an RDF graph ...

When using a cryptosuite that uses RDFC. You could also use one that uses JCS -- or both at the same time (two data integrity proofs on the same document).

peacekeeper commented 10 months ago

I also agree this should be explained.

And conversely, the "other effort" over at IETF should also explain that an SD-JWT/JWS can only secure the JSON document, not the underlying data of a JSON-LD document.

msporny commented 2 months ago

PR #271 has been raised to address this issue. This issue will be closed once PR #271 has been merged.

msporny commented 2 months ago

PR #271 has been merged, closing.