Skip to content

Commit 1dde590

Browse files
committed
fix rendering & improve iana description text
1 parent b019cbf commit 1dde590

File tree

1 file changed

+6
-4
lines changed

1 file changed

+6
-4
lines changed

draft-ietf-oauth-status-list.md

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -605,6 +605,7 @@ A malicious Issuer could bypass the privacy benefits of the herd privacy by gene
605605
Once the Relying Party receives the Referenced Token, this enables him to request the Status List to validate its status through the provided `uri` parameter and look up the corresponding `index`. However, the Relying Party may persistently store the `uri` and `index` of the Referenced Token to request the Status List again at a later time. By doing so regularly, the Relying Party may create a profile of the Referenced Token's validity status. This behaviour may be intended as a feature, e.g. for a KYC process that requires regular validity checks, but might also be abused in cases where this is not intended and unknown to the Holder, e.g. profiling the suspension of a driving license or checking the employment status of an employee credential.
606606

607607
This behaviour could be mitigated by:
608+
608609
- adding authorization rules to the Status List, see [](#security-authorization).
609610
- regular re-issuance of the Referenced Token, see [](#implementation-lifecycle).
610611

@@ -653,7 +654,7 @@ IANA "JSON Web Token Claims" registry {{IANA.JWT}} established by {{RFC7519}}.
653654
<br/>
654655

655656
* Claim Name: `status_list`
656-
* Claim Description: A status list containing up-to-date status information on multiple other JWTs encoded as a bitarray.
657+
* Claim Description: A status list containing up-to-date status information on multiple tokens.
657658
* Change Controller: IETF
658659
* Specification Document(s): [](#status-list-token-jwt) of this specification
659660

@@ -690,7 +691,7 @@ Specification Document(s):
690691
### Initial Registry Contents
691692

692693
* Status Method Value: `status_list`
693-
* Status Method Description: A status list containing up-to-date status information on multiple other JWTs encoded as a bitarray.
694+
* Status Method Description: A status list containing up-to-date status information on multiple tokens.
694695
* Change Controller: IETF
695696
* Specification Document(s): [](#referenced-token-jwt) of this specification
696697

@@ -713,7 +714,7 @@ IANA "CBOR Web Token (CWT) Claims" registry {{IANA.CWT}} established by {{RFC839
713714

714715
* Claim Name: `status_list`
715716
* Claim Key: TBD (requested assignment 65533)
716-
* Claim Description: A status list containing up-to-date status information on multiple other CWTs encoded as a bitarray.
717+
* Claim Description: A status list containing up-to-date status information on multiple tokens.
717718
* Change Controller: IETF
718719
* Specification Document(s): [](#status-list-token-cwt) of this specification
719720

@@ -750,7 +751,7 @@ Specification Document(s):
750751
### Initial Registry Contents
751752

752753
* Status Method Value: `status_list`
753-
* Status Method Description: A status list containing up-to-date status information on multiple other CWTs encoded as a bitarray.
754+
* Status Method Description: A status list containing up-to-date status information on multiple tokens.
754755
* Change Controller: IETF
755756
* Specification Document(s): [](#referenced-token-cwt) of this specification
756757

@@ -875,6 +876,7 @@ for their valuable contributions, discussions and feedback to this specification
875876

876877
-04
877878

879+
* editorial fixes
878880
* add CORS considerations to the http endpoint
879881
* fix reference of Status List in CBOR format
880882
* added status_list CWT claim key assigned

0 commit comments

Comments
 (0)