Skip to content

Commit

Permalink
Reflow securing spec section.
Browse files Browse the repository at this point in the history
  • Loading branch information
msporny committed Jan 6, 2024
1 parent f968be2 commit bf48d01
Showing 1 changed file with 27 additions and 62 deletions.
89 changes: 27 additions & 62 deletions index.html
Original file line number Diff line number Diff line change
Expand Up @@ -3984,6 +3984,17 @@ <h3>Securing Mechanism Specifications</h3>
</dd>
</dl>

<p class="issue atrisk"
title="Controller document reference might change">
The Working Group is currently attempting to align the definitions of a
controller document between [[[?DID-CORE]]], [[[?VC-DATA-INTEGRITY]]], and
[[[?VC-JOSE-COSE]]]. The goal is to have one specification that each of the
previously stated specifications, and this specification, can reference for
the normative statements related to controller documents. The normative
references to controller documents are expected to change during the
Candidate Recommendation phase.
</p>

<p>
Securing mechanism specifications SHOULD provide integrity protection for any
information referenced by a URL that is critical to validation. Mechanisms that
Expand All @@ -3992,26 +4003,6 @@ <h3>Securing Mechanism Specifications</h3>
<a href="#base-context"></a>.
</p>

<p>
Securing mechanism specifications SHOULD register the securing mechanism in the
<a data-cite="?VC-SPECS#securing-mechanisms">Securing Mechanisms</a> section
of the [[[?VC-SPECS]]] [[?VC-SPECS]].
</p>

<p class="note"
title="Choice of securing mechanism is use-case dependent">
There are multiple acceptable securing mechanisms, and this specification does
not mandate any particular securing mechanism for use with
[=verifiable credentials=] or [=verifiable presentations=].
The Working Group that produced this specification did standardize two
securing mechanism options, which are:
[[[VC-DATA-INTEGRITY]]] [[VC-DATA-INTEGRITY]] and [[[VC-JOSE-COSE]]]
[[VC-JOSE-COSE]]. Other securing mechanisms that are known to the community
can be found in the
<a data-cite="?VC-SPECS#securing-mechanisms">Securing Mechanisms</a> section
of the [[[?VC-SPECS]]] [[?VC-SPECS]].
</p>

<p>
Securing mechanism specifications that create new types of [=embedded proofs=]
MUST specify a [=property=] for securing both [=verifiable credentials=] and
Expand Down Expand Up @@ -4044,50 +4035,24 @@ <h3>Securing Mechanism Specifications</h3>
</li>
</ul>

<p class="issue atrisk"
title="Controller document reference might change">
The Working Group is currently attempting to align the definitions of a
controller document between [[[?DID-CORE]]], [[[VC-DATA-INTEGRITY]]], and
[[[VC-JOSE-COSE]]]. The goal is to have one specification that each of the
previously stated specifications, and this specification, can reference for
the normative statements related to controller documents. The normative
references to controller documents are expected to change during the
Candidate Recommendation phase.
<p>
Securing mechanism specifications SHOULD register the securing mechanism in the
<a data-cite="?VC-SPECS#securing-mechanisms">Securing Mechanisms</a> section
of the [[[?VC-SPECS]]] [[?VC-SPECS]].
</p>

<ul>
<li>
The property MUST relate the [=verifiable credential=] or [=verifiable
presentation=] to a separable and securable [=proof graph=].
</li>
<li>
The property MUST define all terms used by the [=proof graph=]. For example,
the mechanism could define vocabulary specifications and `@context` files
in the same manner as they are utilized by this specification.
</li>
<li>
In the case of a [=verifiable credential=], the property MUST secure the
[=default graph=].
</li>
<li>
In the case of a [=verifiable presentation=], the property MUST secure the
[=default graph=] of the [=presentation=] as well as every [=proof graph=]
related to each [=verifiable credential=].
</li>
<li>
The property MAY reuse the `proof` property as defined in [[VC-DATA-INTEGRITY]].
</li>
</ul>

<p class="issue atrisk"
title="Controller document reference might change">
The Working Group is currently attempting to align the definitions of a
controller document between [[[?DID-CORE]]], [[[VC-DATA-INTEGRITY]]], and
[[[VC-JOSE-COSE]]]. The goal is to have one specification that each of the
previously stated specifications, and this specification, can reference for
the normative statements related to controller documents. The normative
references to controller documents are expected to change during the
Candidate Recommendation phase.
<p class="note"
title="Choice of securing mechanism is use-case dependent">
There are multiple acceptable securing mechanisms, and this specification does
not mandate any particular securing mechanism for use with
[=verifiable credentials=] or [=verifiable presentations=].
The Working Group that produced this specification did standardize two
securing mechanism options, which are:
[[[VC-DATA-INTEGRITY]]] [[VC-DATA-INTEGRITY]] and [[[VC-JOSE-COSE]]]
[[VC-JOSE-COSE]]. Other securing mechanisms that are known to the community
can be found in the
<a data-cite="?VC-SPECS#securing-mechanisms">Securing Mechanisms</a> section
of the [[[?VC-SPECS]]] [[?VC-SPECS]].
</p>

</section>
Expand Down

0 comments on commit bf48d01

Please sign in to comment.