Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Consider have persistent caching DID documents #3467

Open
reinkrul opened this issue Oct 8, 2024 · 2 comments
Open

Consider have persistent caching DID documents #3467

reinkrul opened this issue Oct 8, 2024 · 2 comments

Comments

@reinkrul
Copy link
Member

reinkrul commented Oct 8, 2024

We do have caching for it (mainly for speeding up DID resolving), but only in-memory. If an issuer's DID document becomes unavailable for whatever reason, things break in practice. We could quite easily mitigate this by making the cache persistent (e.g. in SQL or Redis/etc)

@gerardsn
Copy link
Member

gerardsn commented Oct 8, 2024

This is indeed very relevant for issuers
We currently cache the statuslist credentials with the idea that it is available if the issuer has some downtime, but the first step in validating a credential is signature validation that fails if the DID document of the issuer is not available.

@woutslakhorst
Copy link
Member

woutslakhorst commented Oct 8, 2024

Most policies allow for a 4 hour stale copy of revocationlists/keymaterial which could be bridged by a stale local copy. I would prefer to check if an issuer can run a cluster of nodes first since this would reduce downtime the most.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants