@@ -1171,7 +1171,7 @@ <h3>Malicious Issuers and Verifiers</h3>
1171
1171
</ section >
1172
1172
1173
1173
< section class ="informative ">
1174
- < h3 > Status List Monitoring </ h3 >
1174
+ < h3 > Monitoring Status Lists </ h3 >
1175
1175
1176
1176
< p >
1177
1177
Once a < a > verifier</ a > knows of a status list and entry index that is
@@ -1180,27 +1180,27 @@ <h3>Status List Monitoring</h3>
1180
1180
status list continues to be updated. This is useful to a < a > verifier</ a > that
1181
1181
needs to understand when a particular < a > verifiable credential</ a > has changed
1182
1182
status without asking the < a > issuer</ a > directly for status information on
1183
- the specific < a > holder </ a > or when interacting with the < a > holder</ a > to get
1183
+ the specific < a > verifiable credential </ a > or when interacting with the < a > holder</ a > to get
1184
1184
the latest status information is not possible. The feature can also cause a
1185
- privacy violation if the < a > holder</ a > is unaware of the ability for the
1186
- < a > verifier</ a > to perform near-real-time checks on the status of the
1185
+ privacy violation for the < a > holder</ a > and/or < a > subject(s) </ a > if the
1186
+ < a > verifier</ a > is able to perform near-real-time checks on the status of the
1187
1187
< a > verifiable credential</ a > .
1188
1188
</ p >
1189
1189
1190
1190
< p >
1191
- < a > Issuers</ a > can provide a level of reprieve from this privacy concern to
1192
- < a > holders</ a > by revoking and re-issuing effectively the same
1191
+ < a > Issuers</ a > can provide a level of reprieve from this privacy concern
1192
+ < a > holders</ a > by revoking and reissuing effectively the same
1193
1193
< a > verifiable credential</ a > on a timeline that is relatively short in nature.
1194
- For example, an < a > issuer</ a > could automatically re-issue a
1195
- < a > verifiable credential</ a > every three months to break any sort of long-term
1196
- monitoring of a < a > verifiable credential </ a > as it changes status and assign
1197
- a new status entry index when the re-issuance occurs .
1194
+ For example, an < a > issuer</ a > could automatically reissue a
1195
+ < a > verifiable credential</ a > every three months and assign a new status entry
1196
+ index when the reissuance occurs to break any sort of long-term monitoring
1197
+ of a < a > verifiable credential </ a > as it changes status .
1198
1198
</ p >
1199
1199
1200
1200
</ section >
1201
1201
1202
1202
< section class ="informative ">
1203
- < h3 > Status Message Correlation </ h3 >
1203
+ < h3 > Correlation of Status Messages </ h3 >
1204
1204
< p >
1205
1205
This specification provides a means by which multiple status messages can be
1206
1206
provided for a particular entry in a status list. While this mechanism can
@@ -1229,30 +1229,31 @@ <h3>Status Message Correlation</h3>
1229
1229
</ section >
1230
1230
1231
1231
< section class ="informative ">
1232
- < h3 > Status Message Alterations </ h3 >
1232
+ < h3 > Alteration of Status Messages </ h3 >
1233
1233
1234
1234
< p >
1235
1235
When a status list uses the status messages feature, it becomes possible for
1236
- the < a > issuer</ a > to increase the type of messages that are associated with
1236
+ the < a > issuer</ a > to increase the types of messages that are associated with
1237
1237
the < a > verifiable credentials</ a > it issues over time.
1238
1238
</ p >
1239
1239
1240
1240
< p >
1241
- This feature creates a potential privacy violation where < a > holder</ a > of the
1241
+ This feature creates a potential privacy violation where a < a > holder</ a > or
1242
+ < a > subject</ a > of the
1242
1243
< a > verifiable credential</ a > might be associated with additional status
1243
1244
information that was not present when the original < a > verifiable credential</ a >
1244
1245
was issued. For example, initial status messages might convey "delayed" and
1245
1246
"canceled", but additional status messages might be added by the < a > issuer</ a >
1246
- to convey "delayed due to non-payment" and "canceled due to illegal activity",
1247
- which would not be apparent to the < a > holder</ a > unless there was monitoring
1248
- software operating on behalf of the holder that would warn them that the
1249
- < a > issuer</ a > intends to expose additional information about their activity.
1247
+ to convey "delayed due to non-payment" and "canceled due to illegal activity".
1248
+ This change would not be apparent to the < a > holder</ a > unless there was
1249
+ monitoring software operating on their behalf that would warn them that
1250
+ the < a > issuer</ a > intends to expose additional information about their activity.
1250
1251
</ p >
1251
1252
1252
1253
< p >
1253
1254
Holder software can provide features to < a > holders</ a > that warn them about
1254
- their level of information exposure when using < a > verifiable credentials</ a >
1255
- that are associated with status messages and warn them when the level of
1255
+ the level of < a > holder </ a > and/or < a > subject </ a > information exposure when using < a > verifiable credentials</ a >
1256
+ that are associated with status messages, and warn them when the level of
1256
1257
information exposure changes.
1257
1258
</ p >
1258
1259
</ section >
0 commit comments