From ce9cf159a1079c6a3a9a549c141b1aa0ef8cd1c0 Mon Sep 17 00:00:00 2001 From: Manu Sporny Date: Sun, 3 Dec 2023 15:47:24 -0500 Subject: [PATCH 1/5] Allow `relatedResource` to be used in presentations. --- index.html | 19 ++++++++++--------- 1 file changed, 10 insertions(+), 9 deletions(-) diff --git a/index.html b/index.html index 28850e2a5..53dbf7b6f 100644 --- a/index.html +++ b/index.html @@ -3054,25 +3054,26 @@

Semantic Interoperability

Integrity of Related Resources

-When including a link to an external resource in a verifiable credential, +When including a link to an external resource in a conforming document, it is desirable to know whether the resource that is pointed to is the same at signing time as it is at verification time. This applies to cases where there is an external resource that is remotely retrieved as well as to cases where the -issuer and/or verifier may have local cached copies of a resource. +issuer and/or verifier might have local cached copies of a +resource.

It is also desirable to know that the contents of the JSON-LD context(s) used in -the verifiable credential are the same when used by both the +a conforming document are the same when used by both the issuer and verifier.

-To validate that a resource referenced by a verifiable credential is the +To validate that a resource referenced by a conforming document is the same at verification time as it is at issuing time, an implementer MAY include a property named relatedResource that stores an array of objects that describe additional integrity metadata about -each resource referenced by the verifiable credential. If +each resource referenced by the conforming document. If relatedResource is present, there MUST be an object in the array -for each remote resource for each context used in the verifiable credential. +for each remote resource used in the verifiable credential.

The requirement that contexts be listed in `relatedResource` is currently being @@ -3118,7 +3119,7 @@

Integrity of Related Resources

-Any object in the verifiable credential that contains an `id` [[URL]] +Any object in a conforming document that contains an `id` [[URL]] property MAY be annotated with integrity information as specified in this section by inclusion of digestSRI in the object. @@ -3140,7 +3141,7 @@

Integrity of Related Resources

FIPS 180-4 Secure Hash Standard and the Commercial National Security Algorithm Suite 2.0 to ensure that they are -chosing a current and reliable hash algorithm. At the time of this writing +choosing a current and reliable hash algorithm. At the time of this writing `sha384` SHOULD be considered the minimum strength hash algorithm for use by implementers.

@@ -3170,7 +3171,7 @@

Integrity of Related Resources

-An example of an object in a `credentialSubject` that is refering to an +An example of an object in a `credentialSubject` that is referring to an integrity protected image.

From acc5b0a78ac982113dabef01d1f7dc5f34807304 Mon Sep 17 00:00:00 2001 From: Manu Sporny Date: Sun, 3 Dec 2023 15:51:11 -0500 Subject: [PATCH 2/5] Update domain for `relatedResource`. --- vocab/credentials/v2/vocabulary.yml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/vocab/credentials/v2/vocabulary.yml b/vocab/credentials/v2/vocabulary.yml index d39a0c29a..cce531db3 100644 --- a/vocab/credentials/v2/vocabulary.yml +++ b/vocab/credentials/v2/vocabulary.yml @@ -103,10 +103,10 @@ property: label: Subresource integrity digest defined_by: https://www.w3.org/TR/vc-data-model-2.0/#defn-digestSRI range: cred:sriString - see_also: + see_also: - label: Subresource Integrity Metadata url: https://www.w3.org/TR/SRI/#the-integrity-attribute - + - id: evidence label: Evidence defined_by: https://www.w3.org/TR/vc-data-model-2.0/#defn-evidence @@ -163,7 +163,7 @@ property: - id: relatedResource label: Related resource - domain: cred:VerifiableCredential + domain: [cred:VerifiableCredential, cred:VerifiablePresentation] range: IRI defined_by: https://www.w3.org/TR/vc-data-model-2.0/#defn-relatedResource @@ -198,7 +198,7 @@ datatype: label: Datatype for digest SRI values upper_value: xsd:string defined_by: https://www.w3.org/TR/vc-data-model-2.0/#the-sristring-datatype - see_also: + see_also: - label: Subresource Integrity Metadata url: https://www.w3.org/TR/SRI/#the-integrity-attribute - + From 1eb296276310e1bd108801a28b649daebf12a31f Mon Sep 17 00:00:00 2001 From: Manu Sporny Date: Sun, 3 Dec 2023 15:52:14 -0500 Subject: [PATCH 3/5] Add `relatedResource` to `VerifiablePresentation` in JSON-LD Context. --- contexts/credentials/v2 | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/contexts/credentials/v2 b/contexts/credentials/v2 index 7564e7ab8..b3d66c2ba 100644 --- a/contexts/credentials/v2 +++ b/contexts/credentials/v2 @@ -187,6 +187,10 @@ "@container": "@graph", "@context": null }, + "relatedResource": { + "@id": "https://www.w3.org/2018/credentials#relatedResource", + "@type": "@id" + }, "termsOfUse": { "@id": "https://www.w3.org/2018/credentials#termsOfUse", "@type": "@id" From bc4edbfeb4c8ec1aab4bb0b7953a80abe133a776 Mon Sep 17 00:00:00 2001 From: Manu Sporny Date: Sun, 3 Dec 2023 15:57:46 -0500 Subject: [PATCH 4/5] Add at risk issue marker for `relatedResource`. --- index.html | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/index.html b/index.html index 53dbf7b6f..1575cf492 100644 --- a/index.html +++ b/index.html @@ -3079,6 +3079,13 @@

Integrity of Related Resources

The requirement that contexts be listed in `relatedResource` is currently being debated in the VCWG. This requirement might be removed in future iterations of the specification. +

+

+The Working Group is seeking feedback from implementers on whether the +`relatedResource` property is useful when used in `VerifiablePresentation` +objects. Based on feedback, the Working Group might determine that the property +is not useful and will then remove the feature during the Candidate +Recommendation phase.

Each object in the relatedResource array MUST contain the From de8355957fc69fe3b390caf93f48234bddf3fde5 Mon Sep 17 00:00:00 2001 From: Manu Sporny Date: Mon, 4 Dec 2023 09:10:34 -0500 Subject: [PATCH 5/5] Fix usage of "atrisk" CSS class. --- index.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/index.html b/index.html index 1575cf492..7e49b7bf0 100644 --- a/index.html +++ b/index.html @@ -3080,7 +3080,7 @@

Integrity of Related Resources

debated in the VCWG. This requirement might be removed in future iterations of the specification.

-

+

The Working Group is seeking feedback from implementers on whether the `relatedResource` property is useful when used in `VerifiablePresentation` objects. Based on feedback, the Working Group might determine that the property