Skip to content

Commit 066b9ab

Browse files
committed
adjust registry text
1 parent 21dc0f1 commit 066b9ab

File tree

1 file changed

+12
-3
lines changed

1 file changed

+12
-3
lines changed

draft-ietf-oauth-status-list.md

Lines changed: 12 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -36,6 +36,7 @@ normative:
3636
informative:
3737
RFC6749: RFC6749
3838
RFC7662: RFC7662
39+
RFC7800: RFC7800
3940

4041
--- abstract
4142

@@ -81,7 +82,7 @@ Revocation mechanisms are an essential part for most identity ecosystems. In the
8182

8283
This specification seeks to find a balance between scalability, security, and privacy by minimizing the status information to mere bits (often a single bit) and compressing the resulting binary data. Thereby, a Status List may contain statuses of many thousands or millions Referenced Tokens while remaining as small as possible. Placing large amounts of Referenced Tokens into the same list also enables herd privacy relative to the Issuer.
8384

84-
There will likely be different mechanisms to convey token/credential status information in the foreseeable future depending on specific use-cases and their requirements. The way this information is transported in the token is defined with possible re-use or extension in mind.
85+
This specification establishes the IANA "Status Mechanism Methods" registry for status mechanism in and registers the members defined by this specification. Other specifications can register other members used for confirmation, including other members for conveying proof-of-possession keys using different key representations.
8586

8687
## Design Considerations
8788

@@ -226,6 +227,10 @@ TBD
226227

227228
# Referenced Token {#referenced-token}
228229

230+
## Status Claim {#status-claim}
231+
232+
By including a "status" claim in a JWT, the issuer of the JWT declares that the credential is referencing a mechanism to retrieve status information about this credential. The claim contains members used to reference to a status list as defined in this specification. Other members of the "status" object may be defined because status list means to check the status of a credential. This is analogous to "cnf" claim in Section 3.1 of {{RFC7800}} in which different authenticity confirmation methods can be included.
233+
229234
## Referenced Token in JWT Format {#referenced-token-jwt}
230235

231236
The Referenced Token MUST be encoded as a "JSON Web Token (JWT)" according to {{RFC7519}}.
@@ -428,14 +433,18 @@ IANA "JSON Web Token Claims" registry [@IANA.JWT] established by [@!RFC7519].
428433
* Claim Name: `status`
429434
* Claim Description: Reference to a status or validity mechanism containing up-to-date status information on the JWT.
430435
* Change Controller: IETF
431-
* Specification Document(s): [[ (#referenced-token-jwt) of this specification ]]
436+
* Specification Document(s): [](#status-claim) of this specification
432437

433438
<br/>
434439

435440
* Claim Name: `status_list`
436441
* Claim Description: A status list containing up-to-date status information on multiple other JWTs encoded as a bitarray.
437442
* Change Controller: IETF
438-
* Specification Document(s): [[ (#status-list-json) of this specification ]]
443+
* Specification Document(s): [](#status-list-json) of this specification
444+
445+
## JWT Confirmation Methods Registry {#iana-registry}
446+
447+
This specification establishes the IANA "Status Mechanism Methods" registry for JWT "status" member values. The registry records the status mechanism method member and a reference to the specification that defines it.
439448

440449
## Media Type Registration
441450

0 commit comments

Comments
 (0)