Skip to content

Commit 1c9ea79

Browse files
committed
Combine long-lived identifier section with identifier section.
1 parent 45f700e commit 1c9ea79

File tree

1 file changed

+29
-33
lines changed

1 file changed

+29
-33
lines changed

index.html

Lines changed: 29 additions & 33 deletions
Original file line numberDiff line numberDiff line change
@@ -5300,39 +5300,55 @@ <h3>Personally Identifiable Information</h3>
53005300
<section class="informative">
53015301
<h3>Identifier-Based Correlation</h3>
53025302

5303+
<p>
5304+
[=Verifiable credentials=] might contain long-lived identifiers that could be
5305+
used to correlate individuals. These types of identifiers include [=subject=]
5306+
identifiers, email addresses, government-issued identifiers, organization-issued
5307+
identifiers, addresses, healthcare vitals, and many other sorts of long-lived
5308+
identifiers. Implementers of software used by [=holders=] are advised to strive
5309+
to detect identifiers in [=verifiable credentials=] containing information that
5310+
could be used to correlate individuals and warn [=holders=] when they are
5311+
getting ready to share this information. The rest of this section elaborates
5312+
on guidance related to the use of long-lived identifiers.
5313+
</p>
5314+
53035315
<p>
53045316
[=Subjects=] of [=verifiable credentials=] are identified using the `id`
53055317
property, as defined in Section [[[#identifiers]]], and are used in places such
53065318
as the `credentialSubject.id` property. The identifiers used to identify a
53075319
[=subject=] create a greater risk of correlation when the identifiers are
5308-
long-lived or used across more than one web domain.
5320+
long-lived or used across more than one web domain. Other types of identifiers
5321+
that fall into this category are email addresses, government-issued identifiers,
5322+
and organization-issued identifiers.
53095323
</p>
53105324

53115325
<p>
53125326
Similarly, disclosing the [=credential=] identifier (such as in
5313-
[[[#example-usage-of-the-id-property]]]) leads to
5314-
situations where multiple [=verifiers=], or an [=issuer=] and a [=verifier=],
5315-
can collude to correlate the [=holder=]. If [=holders=] want to reduce
5316-
correlation, they are advised to use [=verifiable credentials=] from [=issuers=]
5317-
that allow selectively disclosing correlating identifiers in a [=verifiable
5318-
presentation=]. Such approaches expect the [=holder=] to generate the identifier
5319-
and might even allow hiding the identifier from the [=issuer=] through the use
5320-
of techniques like
5327+
[[[#example-usage-of-the-id-property]]]) leads to situations where multiple
5328+
[=verifiers=], or an [=issuer=] and a [=verifier=], can collude to correlate the
5329+
[=holder=].
5330+
</p>
5331+
5332+
<p>
5333+
If [=holders=] want to reduce correlation, they are advised to use [=verifiable
5334+
credentials=] from [=issuers=] that allow selectively disclosing correlating
5335+
identifiers in a [=verifiable presentation=]. Such approaches expect the
5336+
[=holder=] to generate the identifier and might even allow hiding the identifier
5337+
from the [=issuer=] through the use of techniques like
53215338
<a href="https://en.wikipedia.org/wiki/Blind_signature">blind signatures</a>,
53225339
while still keeping the identifier embedded and signed in the [=verifiable
53235340
credential=].
53245341
</p>
53255342

53265343
<p>
5327-
Securing mechanism specification authors are advised to avoid enabling
5344+
[=Securing mechanism=] specification authors are advised to avoid enabling
53285345
identifier-based correlation by designing their technologies, when possible,
53295346
to avoid the use of correlating identifiers.
53305347
</p>
53315348

53325349
<p>
5333-
If strong anti-correlation properties are a requirement in a
5334-
[=verifiable credentials=] system, it is strongly advised that identifiers
5335-
are either:
5350+
If strong anti-correlation properties are a requirement in a [=verifiable
5351+
credentials=] system, it is strongly advised that identifiers are either:
53365352
</p>
53375353

53385354
<ul>
@@ -5397,26 +5413,6 @@ <h3>Signature-Based Correlation</h3>
53975413
</p>
53985414
</section>
53995415

5400-
<section class="informative">
5401-
<h3>Long-Lived-Identifier-Based Correlation</h3>
5402-
5403-
<p>
5404-
[=Verifiable credentials=] might contain long-lived identifiers that could
5405-
be used to correlate individuals. These types of identifiers include
5406-
[=subject=] identifiers, email addresses, government-issued identifiers,
5407-
organization-issued identifiers, addresses, healthcare vitals,
5408-
[=verifiable credential=]-specific JSON-LD contexts, and many other sorts of
5409-
long-lived identifiers.
5410-
</p>
5411-
5412-
<p>
5413-
Organizations providing software to [=holders=] should strive to identify
5414-
fields in [=verifiable credentials=] containing information that could be
5415-
used to correlate individuals and warn [=holders=] when this information is
5416-
shared.
5417-
</p>
5418-
</section>
5419-
54205416
<section class="informative">
54215417
<h3>Metadata-based Correlation</h3>
54225418

0 commit comments

Comments
 (0)