Skip to content

Commit

Permalink
Script updating gh-pages from 2f57d2f. [ci skip]
Browse files Browse the repository at this point in the history
  • Loading branch information
ID Bot committed Sep 24, 2024
1 parent 0d8788e commit 0350ab5
Show file tree
Hide file tree
Showing 2 changed files with 136 additions and 78 deletions.
95 changes: 61 additions & 34 deletions draft-ietf-oauth-status-list.html
View file
Original file line number Diff line number Diff line change
Expand Up @@ -1030,7 +1030,7 @@
</tr></thead>
<tfoot><tr>
<td class="left">Looker, et al.</td>
<td class="center">Expires 24 March 2025</td>
<td class="center">Expires 28 March 2025</td>
<td class="right">[Page]</td>
</tr></tfoot>
</table>
Expand All @@ -1043,12 +1043,12 @@
<dd class="internet-draft">draft-ietf-oauth-status-list-latest</dd>
<dt class="label-published">Published:</dt>
<dd class="published">
<time datetime="2024-09-20" class="published">20 September 2024</time>
<time datetime="2024-09-24" class="published">24 September 2024</time>
</dd>
<dt class="label-intended-status">Intended Status:</dt>
<dd class="intended-status">Informational</dd>
<dt class="label-expires">Expires:</dt>
<dd class="expires"><time datetime="2025-03-24">24 March 2025</time></dd>
<dd class="expires"><time datetime="2025-03-28">28 March 2025</time></dd>
<dt class="label-authors">Authors:</dt>
<dd class="authors">
<div class="author">
Expand Down Expand Up @@ -1101,7 +1101,7 @@ <h2 id="name-status-of-this-memo">
time. It is inappropriate to use Internet-Drafts as reference
material or to cite them other than as "work in progress."<a href="#section-boilerplate.1-3" class="pilcrow"></a></p>
<p id="section-boilerplate.1-4">
This Internet-Draft will expire on 24 March 2025.<a href="#section-boilerplate.1-4" class="pilcrow"></a></p>
This Internet-Draft will expire on 28 March 2025.<a href="#section-boilerplate.1-4" class="pilcrow"></a></p>
</section>
</div>
<div id="copyright">
Expand Down Expand Up @@ -1272,6 +1272,12 @@ <h2 id="name-copyright-notice">
<ul class="compact toc ulBare ulEmpty">
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.13.2.1">
<p id="section-toc.1-1.13.2.1.1"><a href="#section-13.1" class="auto internal xref">13.1</a>.  <a href="#name-token-lifecycle" class="internal xref">Token Lifecycle</a></p>
</li>
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.13.2.2">
<p id="section-toc.1-1.13.2.2.1"><a href="#section-13.2" class="auto internal xref">13.2</a>.  <a href="#name-default-values-and-double-a" class="internal xref">Default Values and Double Allocation</a></p>
</li>
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.13.2.3">
<p id="section-toc.1-1.13.2.3.1"><a href="#section-13.3" class="auto internal xref">13.3</a>.  <a href="#name-status-list-size" class="internal xref">Status List Size</a></p>
</li>
</ul>
</li>
Expand Down Expand Up @@ -1731,9 +1737,9 @@ <h3 id="name-status-list-token-in-cwt-fo">
d28453a20126106e7374617475736c6973742b637774a1044231325850a502782168
747470733a2f2f6578616d706c652e636f6d2f7374617475736c697374732f31061a
648c5bea041a8898dfea19fffe19a8c019fffda2646269747301636c73744a78dadb
b918000217015d5840a0bf0684171cc97f6a7569bd9982c2b653ba8c5aa9e3d3595b
7a2b296834cd1bdf87a574f2b3bb01ed1ba8022c4fd2d799c8a93d55889fc89a5f1f
c267ae44de
b918000217015d58408bc8b1a6387862e4f94402c7d77f417fd4902ef71df8bdffc6
88f421b7f9b605ca25d537c3bb2bdec5307840e99e2bcd2b708e52c331a32d0e41fc
426487bf51
</pre><a href="#section-5.2-9" class="pilcrow"></a>
</div>
<p id="section-5.2-10">The following is the CBOR Annotated Hex output of the example above:<a href="#section-5.2-10" class="pilcrow"></a></p>
Expand All @@ -1757,12 +1763,12 @@ <h3 id="name-status-list-token-in-cwt-fo">
6269747301636c73744a78da # "bits\x01clstJxÚ"
dbb918000217015d # "Û¹\x18\x00\x02\x17\x01]"
58 40 # bytes(64)
a0bf0684171cc97f6a7569bd # "\xa0¿\x06\x84\x17\x1cÉ\x7fjui½"
9982c2b653ba8c5aa9e3d359 # "\x99\x82¶Sº\x8cZ©ãÓY"
5b7a2b296834cd1bdf87a574 # "[z+)h4Í\x1bß\x87¥t"
f2b3bb01ed1ba8022c4fd2d7 # "ò³»\x01í\x1b¨\x02,OÒ×"
99c8a93d55889fc89a5f1fc2 # "\x99È©=U\x88\x9fÈ\x9a_\x1fÂ"
67ae44de # "g®DÞ"
8bc8b1a6387862e4f94402c7 # "\x8bȱ¦8xbäùD\x02Ç"
d77f417fd4902ef71df8bdff # "×\x7fA\x7fÔ\x90.÷\x1dø½ÿ"
c688f421b7f9b605ca25d537 # "Æ\x88ô!·ù¶\x05Ê%Õ7"
c3bb2bdec5307840e99e2bcd # "û+ÞÅ0x@é\x9e+Í"
2b708e52c331a32d0e41fc42 # "+p\x8eRÃ1£-\x0eAüB"
6487bf51 # "d\x87¿Q"
</pre><a href="#section-5.2-11" class="pilcrow"></a>
</div>
</section>
Expand Down Expand Up @@ -1904,9 +1910,9 @@ <h3 id="name-referenced-token-in-cwt-for">
d28443a10126a1044231325866a502653132333435017368747470733a2f2f657861
6d706c652e636f6d061a648c5bea041a8898dfea19ffffa16b7374617475735f6c69
7374a2636964780063757269782168747470733a2f2f6578616d706c652e636f6d2f
7374617475736c697374732f31584051989e0267832b97a03771041b69424484956c
ef8b6edaf0d468f2586d79aec90666fd2922462d37c607fbe76274ca3691d84f839f
f4733db0721e16f4d144b5
7374617475736c697374732f3158402c55f1252a58679d3d9cff68776f25fd4c8e19
f860843e3820d6ed1a8692bea950dbdcc75508a40d4629371e5c5ddf481263dce8d0
202eb54ad3d2d9e7a51c23
</pre><a href="#section-6.3-6" class="pilcrow"></a>
</div>
<p id="section-6.3-7">The following is the CBOR Annotated Hex output of the example above:<a href="#section-6.3-7" class="pilcrow"></a></p>
Expand All @@ -1931,12 +1937,12 @@ <h3 id="name-referenced-token-in-cwt-for">
2e636f6d2f7374617475736c # ".com/statusl"
697374732f31 # "ists/1"
58 40 # bytes(64)
51989e0267832b97a0377104 # "Q\x98\x9e\x02g\x83+\x97\xa07q\x04"
1b69424484956cef8b6edaf0 # "\x1biBD\x84\x95lï\x8bnÚð"
d468f2586d79aec90666fd29 # "ÔhòXmy®É\x06fý)"
22462d37c607fbe76274ca36 # ""F-7Æ\x07ûçbtÊ6"
91d84f839ff4733db0721e16 # "\x91ØO\x83\x9fôs=°r\x1e\x16"
f4d144b5 # "ôÑDµ"
2c55f1252a58679d3d9cff68 # ",Uñ%*Xg\x9d=\x9cÿh"
776f25fd4c8e19f860843e38 # "wo%ýL\x8e\x19ø`\x84&gt;8"
20d6ed1a8692bea950dbdcc7 # " Öí\x1a\x86\x92¾©PÛÜÇ"
5508a40d4629371e5c5ddf48 # "U\x08¤\x0dF)7\x1e\]ßH"
1263dce8d0202eb54ad3d2d9 # "\x12cÜèÐ .µJÓÒÙ"
e7a51c23 # "ç¥\x1c#"
</pre><a href="#section-6.3-8" class="pilcrow"></a>
</div>
</section>
Expand Down Expand Up @@ -2353,10 +2359,28 @@ <h3 id="name-token-lifecycle">
<a href="#section-13.1" class="section-number selfRef">13.1. </a><a href="#name-token-lifecycle" class="section-name selfRef">Token Lifecycle</a>
</h3>
<p id="section-13.1-1">The lifetime of a Status List (and the Status List Token) depends on the lifetime of its Referenced Tokens. Once all Referenced Tokens are expired, the Issuer may stop serving the Status List (and the Status List Token).<a href="#section-13.1-1" class="pilcrow"></a></p>
<p id="section-13.1-2">Referenced Tokens may be regularly re-issued to increase security or to mitigate linkability and prevent tracking by Relying Parties. In this case, every Referenced Token <span class="bcp14">MUST</span> have a fresh Status List entry.<a href="#section-13.1-2" class="pilcrow"></a></p>
<p id="section-13.1-2">Referenced Tokens may be regularly re-issued to mitigate linkability of presentations to Relying Parties. In this case, every re-issued Referenced Token <span class="bcp14">MUST</span> have a fresh Status List entry in order to prevent this becoming possible source of correlation.<a href="#section-13.1-2" class="pilcrow"></a></p>
<p id="section-13.1-3">Referenced Tokens may also be issued in batches, such that Holders can use individual tokens for every transaction. In this case, every Referenced Token <span class="bcp14">MUST</span> have a dedicated Status List entry. Revoking batch issued Referenced Tokens might reveal this correlation later on.<a href="#section-13.1-3" class="pilcrow"></a></p>
</section>
</div>
<div id="default-values-and-double-allocation">
<section id="section-13.2">
<h3 id="name-default-values-and-double-a">
<a href="#section-13.2" class="section-number selfRef">13.2. </a><a href="#name-default-values-and-double-a" class="section-name selfRef">Default Values and Double Allocation</a>
</h3>
<p id="section-13.2-1">Implementations producing Status Lists are <span class="bcp14">RECOMMENDED</span> to initialize the Status List byte array with a default value and provide this as an initialization parameter to the Issuer. The Issuer is <span class="bcp14">RECOMMENDED</span> to use a default value that represents the most common value for its Referenced Tokens to avoid an update during issuance.<a href="#section-13.2-1" class="pilcrow"></a></p>
<p id="section-13.2-2">Implementations producing Status Lists are <span class="bcp14">RECOMMENDED</span> to prevent double allocation, i.e. re-using the same <code>uri</code> and <code>index</code> for multiple Referenced Tokens. The Issuer <span class="bcp14">MUST</span> prevent any unintended double allocation by using the Status List.<a href="#section-13.2-2" class="pilcrow"></a></p>
</section>
</div>
<div id="status-list-size">
<section id="section-13.3">
<h3 id="name-status-list-size">
<a href="#section-13.3" class="section-number selfRef">13.3. </a><a href="#name-status-list-size" class="section-name selfRef">Status List Size</a>
</h3>
<p id="section-13.3-1">The Status List Issuer may increase the size of a Status List if it requires indices for additional Referenced Tokens. It is <span class="bcp14">RECOMMENDED</span> that the size of a Status List in bits is divisible in bytes (8 bits) without a remainder, i.e. <code>size-in-bits</code> % 8 = 0.<a href="#section-13.3-1" class="pilcrow"></a></p>
<p id="section-13.3-2">The Status List Issuer may chunk its Referenced Tokens into multiple Status Lists to reduce the transmission size of an individual Status List Token. This may be useful for setups where some entities operate in constrained environments, e.g. for mobile internet or embedded devices.<a href="#section-13.3-2" class="pilcrow"></a></p>
</section>
</div>
</section>
</div>
<div id="iana-considerations">
Expand Down Expand Up @@ -3009,37 +3033,40 @@ <h2 id="name-document-history">
<p id="appendix-B-1">-04<a href="#appendix-B-1" class="pilcrow"></a></p>
<ul class="normal">
<li class="normal" id="appendix-B-2.1">
<p id="appendix-B-2.1.1">add privacy consideration on using private relay protocols<a href="#appendix-B-2.1.1" class="pilcrow"></a></p>
<p id="appendix-B-2.1.1">add implementation consideration for Default Values, Double Allocation and Status List Size<a href="#appendix-B-2.1.1" class="pilcrow"></a></p>
</li>
<li class="normal" id="appendix-B-2.2">
<p id="appendix-B-2.2.1">add privacy consideration on observability of outsiders<a href="#appendix-B-2.2.1" class="pilcrow"></a></p>
<p id="appendix-B-2.2.1">add privacy consideration on using private relay protocols<a href="#appendix-B-2.2.1" class="pilcrow"></a></p>
</li>
<li class="normal" id="appendix-B-2.3">
<p id="appendix-B-2.3.1">add security considerations on correct parsing and decoding<a href="#appendix-B-2.3.1" class="pilcrow"></a></p>
<p id="appendix-B-2.3.1">add privacy consideration on observability of outsiders<a href="#appendix-B-2.3.1" class="pilcrow"></a></p>
</li>
<li class="normal" id="appendix-B-2.4">
<p id="appendix-B-2.4.1">remove requirement for matching iss claim in Referenced Token and Status List Token<a href="#appendix-B-2.4.1" class="pilcrow"></a></p>
<p id="appendix-B-2.4.1">add security considerations on correct parsing and decoding<a href="#appendix-B-2.4.1" class="pilcrow"></a></p>
</li>
<li class="normal" id="appendix-B-2.5">
<p id="appendix-B-2.5.1">add sd-jwt-vc example<a href="#appendix-B-2.5.1" class="pilcrow"></a></p>
<p id="appendix-B-2.5.1">remove requirement for matching iss claim in Referenced Token and Status List Token<a href="#appendix-B-2.5.1" class="pilcrow"></a></p>
</li>
<li class="normal" id="appendix-B-2.6">
<p id="appendix-B-2.6.1">fix CWT status_list map encoding<a href="#appendix-B-2.6.1" class="pilcrow"></a></p>
<p id="appendix-B-2.6.1">add sd-jwt-vc example<a href="#appendix-B-2.6.1" class="pilcrow"></a></p>
</li>
<li class="normal" id="appendix-B-2.7">
<p id="appendix-B-2.7.1">editorial fixes<a href="#appendix-B-2.7.1" class="pilcrow"></a></p>
<p id="appendix-B-2.7.1">fix CWT status_list map encoding<a href="#appendix-B-2.7.1" class="pilcrow"></a></p>
</li>
<li class="normal" id="appendix-B-2.8">
<p id="appendix-B-2.8.1">add CORS considerations to the http endpoint<a href="#appendix-B-2.8.1" class="pilcrow"></a></p>
<p id="appendix-B-2.8.1">editorial fixes<a href="#appendix-B-2.8.1" class="pilcrow"></a></p>
</li>
<li class="normal" id="appendix-B-2.9">
<p id="appendix-B-2.9.1">fix reference of Status List in CBOR format<a href="#appendix-B-2.9.1" class="pilcrow"></a></p>
<p id="appendix-B-2.9.1">add CORS considerations to the http endpoint<a href="#appendix-B-2.9.1" class="pilcrow"></a></p>
</li>
<li class="normal" id="appendix-B-2.10">
<p id="appendix-B-2.10.1">added status_list CWT claim key assigned<a href="#appendix-B-2.10.1" class="pilcrow"></a></p>
<p id="appendix-B-2.10.1">fix reference of Status List in CBOR format<a href="#appendix-B-2.10.1" class="pilcrow"></a></p>
</li>
<li class="normal" id="appendix-B-2.11">
<p id="appendix-B-2.11.1">move base64url definition to terminology<a href="#appendix-B-2.11.1" class="pilcrow"></a></p>
<p id="appendix-B-2.11.1">added status_list CWT claim key assigned<a href="#appendix-B-2.11.1" class="pilcrow"></a></p>
</li>
<li class="normal" id="appendix-B-2.12">
<p id="appendix-B-2.12.1">move base64url definition to terminology<a href="#appendix-B-2.12.1" class="pilcrow"></a></p>
</li>
</ul>
<p id="appendix-B-3">-03<a href="#appendix-B-3" class="pilcrow"></a></p>
Expand Down
Loading

0 comments on commit 0350ab5

Please sign in to comment.