You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
DID documents include information about public keys and authentication requirements, and DID URLs with fragments can be used to refer to this information.
Should we consider adding DID references of this type to particular TD security schemes, eg PSK, OAuth2, etc?
The text was updated successfully, but these errors were encountered:
Something like the following: in a security scheme that requires keys, like "psk", allow fields like:
"publickey": didURL#keyid;
where didURL#keyid is the URL of a did pointing at a public key.
As noted in issue #166, this requires integrity protection of TDs (at the very least). So if there is an "optional" integrity proof section (for instance), it would be required if there are any references like this.
This would not be for the "update" to the TD, but to "version 2.0" (TD Next). By then I would expect DIDs and JSON-LD signing would be normative or at least REC-track, so we can refer to them cleanly.
DID documents include information about public keys and authentication requirements, and DID URLs with fragments can be used to refer to this information.
Should we consider adding DID references of this type to particular TD security schemes, eg PSK, OAuth2, etc?
The text was updated successfully, but these errors were encountered: