Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

NIST defines data integrity differently #83

Closed
OR13 opened this issue Feb 16, 2023 · 5 comments
Closed

NIST defines data integrity differently #83

OR13 opened this issue Feb 16, 2023 · 5 comments
Assignees
Labels
CR1 This item was processed during the first Candidate Recommendation phase. editorial This issue or PR constitutes an editorial change. pending close (7 days) This issue will be closed after 7 days.

Comments

@OR13
Copy link
Contributor

OR13 commented Feb 16, 2023

We define data integrity in the context of RDF information, not "bytes/ data".

Screen Shot 2023-02-16 at 2 50 29 PM

https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-63-4.ipd.pdf

@RieksJ
Copy link

RieksJ commented Feb 21, 2023

The comment I made on w3c/vc-data-model, issue #1047, apply here as well.

@msporny
Copy link
Member

msporny commented Jul 10, 2023

We define data integrity in the context of RDF information, not "bytes/ data".

@OR13, what is the concrete action that you would like to be taken based on this issue?

Given that this is about terminology, which is non-normative, I'm going to mark this as "after CR" and will change that if it seems as if a normative change is being requested on the specification.

@msporny msporny added the CR1 This item was processed during the first Candidate Recommendation phase. label Jul 10, 2023
@OR13
Copy link
Contributor Author

OR13 commented Jul 10, 2023

More elaboration on why it's a favorable property to protect information instead of data.

Perhaps focusing on how order of object members and array items are impacted.

This could probably be rolled into the same PR that elaborates on changing data types using context (the array items issue).

@OR13 OR13 changed the title NIST defines data integrity differently that we do NIST defines data integrity differently Jul 10, 2023
@OR13
Copy link
Contributor Author

OR13 commented Jul 12, 2023

@msporny perhaps this is a good example: w3c/vc-data-model#1149 (comment)

Why is it valuable that iss with term https://www.w3.org/ns/credentials/issuer-dependent#iss be signed and integrity protected, vs iss with term https://www.iana.org/assignments/jose#iss or https://www.iana.org/assignments/jwt#iss

In this section specifically:

https://w3c.github.io/vc-data-integrity/#data-opacity

@msporny
Copy link
Member

msporny commented Feb 24, 2024

The VCWG has achieved consensus that perfect terminology alignment with other specifications, if there isn't confusion generated around the term, is a non-goal. On that basis, it has closed the last remaining terminology alignment request in the VCDM.

Additionally, the assertion in the original issue is not correct, namely:

We define data integrity in the context of RDF information, not "bytes/ data".

No, the "Data Integrity" specification defines it as "data", which aligns with NIST's definition. We have Data Integrity suites that secure the data based on non-RDF data structures, such as JSON.

Based on both of these points, I'm marking this PR as pending close. It will be closed in 7 days unless there are objections.

@msporny msporny added the pending close (7 days) This issue will be closed after 7 days. label Feb 24, 2024
@msporny msporny added the editorial This issue or PR constitutes an editorial change. label Feb 25, 2024
@msporny msporny closed this as completed Apr 28, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
CR1 This item was processed during the first Candidate Recommendation phase. editorial This issue or PR constitutes an editorial change. pending close (7 days) This issue will be closed after 7 days.
Projects
None yet
Development

No branches or pull requests

4 participants