Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Credential Lifecycle] - Revocation #264

Open
pietroACN opened this issue Apr 16, 2024 · 2 comments
Open

[Credential Lifecycle] - Revocation #264

pietroACN opened this issue Apr 16, 2024 · 2 comments
Labels
question Further information is requested
Milestone

Comments

@pietroACN
Copy link

Within Credential Lifecycle revocation is considered "absolute", for example is described as follows: "A Credential that has been revoked, due to legal requirements, inaccuracy or compromise, is valueless and potentially harmful." Link

Credential revocation is not always 'absolute', i.e. a credential can be revoked today (e.g. driving license revoked temporarily by police) but its validity up to the revocation is still correct and any further use should be still allowed provided that the connected status attestation claims that the credential is not valid in a specific timeframe From-To (e.g. 3-months revocation of driving license).
A covid certificate that has been temporarily revoked can be used anytime to demonstrate for example that before revocation holder was entitled to perform some public activity.

Revocation therefore must include a Timeframe (From-To), a tipology, and should not invalidate further use of the credential as it may be used to attest activity outside revocation interval.

@peppelinux
Copy link
Member

we don't want to take into account credential suspections at this stage, a revoked credential is revoked, while if possibile a new one of the same type can be requested and issued, if the requester is eligible in requesting and obtaining it

@peppelinux peppelinux added the question Further information is requested label May 2, 2024
@peppelinux peppelinux added this to the 0.8.0 milestone May 13, 2024
@pietroACN
Copy link
Author

pietroACN commented May 13, 2024

Suspension is only one of the 2 problematic elements that were described in this issue.
The major one is related to the fact that the Credential in some cases must be considered valid (thus is still accurate, useful and valid) for the period before the revocation: a driving license, revoked due expiration or other reasons, is still Valid for the period before the revocation. The inability for user and wallet to present the Credential would limit its rightful & lawful use that depends only from the related Relying Party process and means of use

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

2 participants