Merge pull request #444 from giadas/security-considerations

Security considerations
italia · Oct 25, 2024 · 7699bcf · 7699bcf
2 parents 82f00a3 + 3359e1c
commit 7699bcf
Show file tree

Hide file tree

Showing 5 changed files with 508 additions and 1 deletion.
diff --git a/docs/common/common_definitions.rst b/docs/common/common_definitions.rst
@@ -10,14 +10,18 @@
 .. |check-icon| image:: ../../images/Eo_circle_green_checkmark.svg
    :width: 25
 
+.. |partially-check-icon| image:: ../../images/Eo_circle_orange_checkmark.svg
+   :width: 25
+
 .. |uncheck-icon| image:: ../../images/Eo_circle_red_letter-x.svg
    :width: 25
 
 
 .. |warning-message-it| replace:: Tutti gli esempi contenuti in questa documentazione sono da intendersi come non normativi
 .. |warning-message-en| replace:: All the examples contained in this documentation are meant to be non-normative
 
-
+.. _OAuthCrossDeviceSec: https://datatracker.ietf.org/doc/html/draft-ietf-oauth-cross-device-security-08
+.. _OpenID4VC-SecTrust: https://openid.github.io/OpenID4VC_SecTrust/draft-oid4vc-security-and-trust.html
 .. _OID-FED: https://openid.net/specs/openid-federation-1_0-36.html
 .. _OIDC-FED#RP_metadata: https://openid.net/specs/openid-federation-1_0.html#Section-4.1
 .. _OIDC-FED#Federation_Entity: https://openid.net/specs/openid-federation-1_0.html#Section-4.6

diff --git a/docs/common/standards.rst b/docs/common/standards.rst
@@ -87,3 +87,7 @@ Technical References
       - Lodderstedt, T., Fett, D., Haine, M., Pulido, A., Lehmann, K., Koiwai, K., "OpenID Connect for Identity Assurance 1.0", 24 July 2024.
     * - `SPID/CIE-OpenID-Connect-Specifications`_
       - SPID/CIE OpenID Connect.
+    * - `OAuthCrossDeviceSec`_
+      - Kasselman, P., Fett, D., Skokan, F.,  "Cross-Device Flows: Security Best Current Practice", July 2024, Draft 8.
+    * - `OpenID4VC-SecTrust`_
+      - Fett, D., Lodderstedt, T.,  "Security and Trust in OpenID for Verifiable Credentials Ecosystems", March 2024.
diff --git a/docs/en/index.rst b/docs/en/index.rst
@@ -49,6 +49,7 @@ Index of content
    pseudonyms.rst
    backup-restore.rst
    algorithms.rst
+   security-privacy-considerations.rst
    contribute.rst
    standards.rst