Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The second paragraph of section 7 seems no very clear to me: #40

Closed
FrankXL opened this issue Feb 5, 2020 · 3 comments
Closed

The second paragraph of section 7 seems no very clear to me: #40

FrankXL opened this issue Feb 5, 2020 · 3 comments

Comments

@FrankXL
Copy link

FrankXL commented Feb 5, 2020

It seems to me the statement applies for both models (passport model and BC model).

@mcr
Copy link
Collaborator

mcr commented Feb 11, 2020

In solutions following the background-check model, the Attester is
assumed to trust the Verifier (again, whether directly or indirectly
via a Certificate Authority that it trusts), since the Attester
relies on an Attestation Result it obtains from the Verifier, in
order to access resources.

This paragraph?

@FrankXL
Copy link
Author

FrankXL commented Feb 12, 2020

In solutions following the background-check model, the Attester is
assumed to trust the Verifier (again, whether directly or indirectly
via a Certificate Authority that it trusts), since the Attester
relies on an Attestation Result it obtains from the Verifier, in
order to access resources.

This paragraph?

yes, and my point is for both models, the Attester should also trust the Verifier. I don't see the reason why we emphasize the BC model. In other word, I think current paragraph fits for both models.

@mcr mcr closed this as completed in 490a229 Feb 25, 2020
@mcr
Copy link
Collaborator

mcr commented Feb 25, 2020

In some scenarios, Evidence might contain sensitive information such as Personally Identifiable Information. Thus, an Attester must trust entities to which it sends Evidence, to not reveal sensitive data to unauthorized parties. The Verifier may share this information with other authorized parties, according rules that it controls.
In the background-check model, this Evidence may also be revealed to Relying Party(s).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants