@@ -637,10 +637,10 @@ <h2>Terminology</h2>
637
637
[=verifiable presentations=].< br />
638
638
It also specifies that [=verifiers=] validate claims in [=verifiable
639
639
credentials=] before relying on them. However, the means for such validation
640
- vary widely and are outside the scope of this specification. It is expected
641
- that [=verifiers=] will trust certain [=issuers=] for certain claims and
642
- apply their own rules to determine which claims in which [=credentials=]
643
- are suitable for use by their systems.
640
+ vary widely and are outside the scope of this specification. [=Verifiers=]
641
+ trust certain [=issuers=] for certain claims and apply their own rules to
642
+ determine which claims in which [=credentials=] are suitable for use by their
643
+ systems.
644
644
</ dd >
645
645
< dt > < dfn class ="export "> verifiable credential</ dfn > </ dt >
646
646
< dd >
@@ -1210,14 +1210,14 @@ <h3>Getting Started</h3>
1210
1210
</ p >
1211
1211
1212
1212
< p >
1213
- It is expected that a developer will change `MyPrototypeCredential` below to
1214
- the type of credential they would like to create. Since
1215
- [=verifiable credentials=] talk about subjects, each property-value pair in
1216
- the `credentialSubject` object expresses a particular property of the
1217
- credential subject. Once a developer has added a number of these property-value
1218
- combinations, the modified object can be sent to [=verifiable credential=]
1219
- issuer software and a [=verifiable credential=] will be created for the
1220
- developer. From a prototyping standpoint, that is all a developer needs to do.
1213
+ A developer will change `MyPrototypeCredential` below to the type of credential
1214
+ they would like to create. Since [=verifiable credentials=] talk about subjects,
1215
+ each property-value pair in the `credentialSubject` object expresses a
1216
+ particular property of the credential subject. Once a developer has added a
1217
+ number of these property-value combinations, the modified object can be sent to
1218
+ [=verifiable credential=] issuer software and a [=verifiable credential=] will
1219
+ be created for the developer. From a prototyping standpoint, that is all a
1220
+ developer needs to do.
1221
1221
</ p >
1222
1222
1223
1223
< pre class ="example nohighlight " title ="A template for creating prototype verifiable credentials ">
@@ -1407,12 +1407,11 @@ <h3>Identifiers</h3>
1407
1407
< p class ="note ">
1408
1408
As of this publication, [=DIDs=] are a new type of identifier that are not
1409
1409
necessary for [=verifiable credentials=] to be useful. Specifically,
1410
- [=verifiable credentials=] do not depend on [=DIDs=] and [=DIDs=] do
1411
- not depend on [=verifiable credentials=]. However, it is expected that many
1412
- [=verifiable credentials=] will use [=DIDs=] and that software libraries
1413
- implementing this specification will probably need to resolve [=DIDs=].
1414
- [=DID=]-based URLs are used for expressing identifiers associated with
1415
- [=subjects=], [=issuers=], [=holders=], credential status lists,
1410
+ [=verifiable credentials=] do not depend on [=DIDs=] and [=DIDs=] do not depend
1411
+ on [=verifiable credentials=]. However, many [=verifiable credentials=] will use
1412
+ [=DIDs=] and software libraries implementing this specification will need to
1413
+ resolve [=DIDs=]. [=DID=]-based URLs are used for expressing identifiers
1414
+ associated with [=subjects=], [=issuers=], [=holders=], credential status lists,
1416
1415
cryptographic keys, and other machine-readable information associated with a
1417
1416
[=verifiable credential=].
1418
1417
</ p >
@@ -2240,11 +2239,11 @@ <h3>Status</h3>
2240
2239
The precise content of the [=credential=] status information is determined by
2241
2240
the specific `credentialStatus` [=type=] definition, and varies
2242
2241
depending on factors such as whether it is simple to implement or if it is
2243
- privacy-enhancing. It is expected that the value will provide enough information
2244
- to determine the current status of the [=credential=] and that machine
2245
- readable information will be retrievable from the URL. For example, the object
2246
- could contain a link to an external document which notes whether or not the
2247
- [=credential=] is suspended or revoked.
2242
+ privacy-enhancing. The value will provide enough information to determine the
2243
+ current status of the [=credential=] and that machine readable information will
2244
+ be retrievable from the URL. For example, the object could contain a link to an
2245
+ external document which notes whether or not the [=credential=] is suspended or
2246
+ revoked.
2248
2247
</ p >
2249
2248
2250
2249
< pre class ="example nohighlight "
@@ -2480,8 +2479,8 @@ <h3>Verifiable Presentations</h3>
2480
2479
about the [=holder=] that can be used to [=verify=] the information
2481
2480
expressed in the [=verifiable presentation=].
2482
2481
If the `holder` [=property=] is absent, information about the
2483
- [=holder=] is expected to either be obtained via the securing mechanism, or
2484
- to not pertain to the [=validation=] of the [=verifiable presentation=].
2482
+ [=holder=] is obtained either via the securing mechanism, or
2483
+ does not pertain to the [=validation=] of the [=verifiable presentation=].
2485
2484
</ dd >
2486
2485
</ dl >
2487
2486
@@ -3054,17 +3053,16 @@ <h3>Trust Model</h3>
3054
3053
either of the following:
3055
3054
< ul >
3056
3055
< li >
3057
- An [=issuer=] is expected to secure a [=credential=] with a
3058
- < a href ="#securing-mechanisms "> securing mechanism</ a > which establishes
3059
- that the [=issuer=] generated the [=credential=]. ( In other words, an
3060
- [=issuer =] is expected to [=issue=] a [=verifiable credential=].)
3056
+ An [=issuer=] secures a [=credential=] with a
3057
+ < a href ="#securing-mechanisms "> securing mechanism</ a > which establishes that the
3058
+ [=issuer=] generated the [=credential=]. In other words, an [=issuer=]
3059
+ [=issues =] a [=verifiable credential=].
3061
3060
</ li >
3062
3061
< li >
3063
- A [=credential=] is expected to be transmitted in a way that clearly
3064
- establishes that the [=issuer=] generated the [=credential=], and that
3065
- the [=credential=] was not tampered with in transit nor storage. This
3066
- expectation could be weakened, depending on the risk assessment by the
3067
- [=verifier=].
3062
+ A [=credential=] is transmitted in a way that clearly establishes that the
3063
+ [=issuer=] generated the [=credential=], and that the [=credential=] was not
3064
+ tampered with in transit nor storage. This expectation could be weakened,
3065
+ depending on the risk assessment by the [=verifier=].
3068
3066
</ li >
3069
3067
</ ul >
3070
3068
</ li >
@@ -4770,9 +4768,9 @@ <h3>Media Type Precision</h3>
4770
4768
< section class ="informative ">
4771
4769
< h2 > HTTP</ h2 >
4772
4770
< p >
4773
- It is expected that HTTP endpoints will use the media types associated with
4774
- [=verifiable credentials=] and [=verifiable presentations=] in accept
4775
- headers and when indicating content types.
4771
+ HTTP clients and servers use media types associated with [=verifiable
4772
+ credentials=] and [=verifiable presentations=] in accept headers and when
4773
+ indicating content types.
4776
4774
</ p >
4777
4775
< p >
4778
4776
Nonetheless, HTTP servers might ignore the accept header and return another
@@ -6677,22 +6675,22 @@ <h3>Credential Type</h3>
6677
6675
6678
6676
< p >
6679
6677
The type of a credential is expressed via the < a href ="#types "> type</ a >
6680
- property. A [=verifiable credential=] of a specific type is expected to contain
6681
- specific [=properties=] (which might be deeply nested) that can be used to determine whether or not the
6682
- [=presentation=] satisfies a set of processing rules that the [=verifier=]
6683
- executes. By requesting [=verifiable credentials=] of a particular `type`, the
6684
- [=verifier=] is able to gather specific information from the [=holder=], which
6685
- originated with the [=issuer=] of each [=verifiable credential=], that will
6686
- enable the [=verifier=] to determine the next stage of an interaction with a [=holder=].
6678
+ property. A [=verifiable credential=] of a specific type contains specific
6679
+ [=properties=] (which might be deeply nested) that can be used to determine
6680
+ whether or not the [=presentation=] satisfies a set of processing rules that the
6681
+ [=verifier=] executes. By requesting [=verifiable credentials=] of a particular
6682
+ `type`, the [=verifier=] is able to gather specific information from the
6683
+ [=holder=], which originated with the [=issuer=] of each [=verifiable
6684
+ credential=], that will enable the [=verifier=] to determine the next stage of
6685
+ an interaction with a [=holder=].
6687
6686
</ p >
6688
6687
6689
6688
< p >
6690
6689
When a [=verifier=] requests a [=verifiable credential=] of a specific type,
6691
6690
there will be a set of mandatory and optional [=claims=] that are associated
6692
- with that type. It is expected that a [=verifier=]'s validation of a
6693
- [=verifiable credential=] will fail when mandatory [=claims=] are not
6694
- included, and that any [=claim=] that is not associated with the specific
6695
- type will be ignored. In other words, a
6691
+ with that type. A [=verifier=]'s validation of a [=verifiable credential=] will
6692
+ fail when mandatory [=claims=] are not included, and that any [=claim=] that is
6693
+ not associated with the specific type will be ignored. In other words, a
6696
6694
[=verifier=] will perform input validation on the [=verifiable credential=] it
6697
6695
receives and will reject malformed input based on the credential type
6698
6696
specification.
@@ -6705,15 +6703,14 @@ <h3>Credential Subject</h3>
6705
6703
6706
6704
< p >
6707
6705
In the [=verifiable credentials=] presented by a [=holder=], the value
6708
- associated with the `id` [=property=] for each
6709
- `credentialSubject` is expected to identify a [=subject=] to the
6710
- [=verifier=]. If the [=holder=] is also the [=subject=], then
6711
- the [=verifier=] could authenticate the [=holder=] if they have
6712
- [=verification=] metadata related to the [=holder=]. The [=verifier=]
6713
- could then authenticate the [=holder=] using a signature generated by the [=holder=]
6714
- contained in the [=verifiable presentation=]. The `id`
6715
- [=property=] is optional. [=Verifiers=] could use other [=properties=]
6716
- in a [=verifiable credential=] to uniquely identify a [=subject=].
6706
+ associated with the `id` [=property=] for each `credentialSubject` identifies a
6707
+ [=subject=] to the [=verifier=]. If the [=holder=] is also the [=subject=], then
6708
+ the [=verifier=] could authenticate the [=holder=] if they have [=verification=]
6709
+ metadata related to the [=holder=]. The [=verifier=] could then authenticate the
6710
+ [=holder=] using a signature generated by the [=holder=] contained in the
6711
+ [=verifiable presentation=]. The `id` [=property=] is optional. [=Verifiers=]
6712
+ could use other [=properties=] in a [=verifiable credential=] to uniquely
6713
+ identify a [=subject=].
6717
6714
</ p >
6718
6715
6719
6716
< p class ="note ">
@@ -6728,9 +6725,8 @@ <h3>Credential Subject</h3>
6728
6725
< h3 > Issuer</ h3 >
6729
6726
6730
6727
< p >
6731
- The value associated with the `issuer` [=property=] is expected
6732
- to identify an [=issuer=] that is known to and trusted by the
6733
- [=verifier=].
6728
+ The value associated with the `issuer` [=property=] identifies an [=issuer=]
6729
+ to the [=verifier=].
6734
6730
</ p >
6735
6731
6736
6732
< p >
@@ -6753,15 +6749,15 @@ <h3>Issuer</h3>
6753
6749
< section class ="informative ">
6754
6750
< h4 > Holder</ h4 >
6755
6751
< p >
6756
- The value associated with the `holder` [=property=] is expected
6757
- to be usable to identify the [=holder=] to the [=verifier=].
6752
+ The value associated with the `holder` [=property=] is used to identify the
6753
+ [=holder=] to the [=verifier=].
6758
6754
</ p >
6759
6755
< p >
6760
6756
Often relevant metadata about the [=holder=], as identified by the value of
6761
6757
the `holder` [=property=], is available to, or retrievable by, the
6762
6758
[=verifier=]. For example, a [=holder=] can publish information containing
6763
6759
the [=verification material=] used to secure [=verifiable presentations=]. This
6764
- metadata is expected to be used when checking proofs on [=verifiable presentations=].
6760
+ metadata is used when checking proofs on [=verifiable presentations=].
6765
6761
Some cryptographic identifiers contain all necessary metadata in the identifier itself.
6766
6762
In those cases, no additional metadata is required. Other identifiers use verifiable data
6767
6763
registries where such metadata is automatically published for use by
@@ -6861,7 +6857,7 @@ <h3>Proofs (Signatures)</h3>
6861
6857
The public key is not suspended, revoked, or expired.
6862
6858
</ li >
6863
6859
< li >
6864
- The digital signature is expected to verify .
6860
+ The digital signature verifies .
6865
6861
</ li >
6866
6862
< li >
6867
6863
Any additional requirements defined by the securing mechanism are satisfied.
@@ -7406,9 +7402,9 @@ <h2>application/vc+ld+json</h2>
7406
7402
[=enveloping proof=].
7407
7403
</ p >
7408
7404
< p >
7409
- A [[JSON-LD11]] context is expected to be present in the body of the document, and
7410
- as indicated by the presence of `ld+json` in the media type, the credential is
7411
- expected to be a valid
7405
+ A [[JSON-LD11]] context is expected to be present in the body of the document,
7406
+ and as indicated by the presence of `ld+json` in the media type, the credential
7407
+ is expected to be a valid
7412
7408
< a href ="https://www.w3.org/TR/json-ld11/#dfn-json-ld-document "> JSON-LD
7413
7409
document</ a > .
7414
7410
</ p >
0 commit comments