Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Status Assertion lifecycle, validity period + not greater than #265

Closed
pietroACN opened this issue Apr 16, 2024 · 3 comments · Fixed by #308
Closed

Status Assertion lifecycle, validity period + not greater than #265

pietroACN opened this issue Apr 16, 2024 · 3 comments · Fixed by #308
Labels
invalid This doesn't seem right
Milestone

Comments

@pietroACN
Copy link

From the specification is not clear how the two following requirements could interlace:

  • contain the expiration datetime after which it SHOULD NOT be considered valid anymore and it MUST NOT be greater than the one contained in the Digital Credential which it refers to; Link
  • have a validity period not greater than 24 hours; Link

For example if the expiration datetime would be set after 30days and validity period set after 12 hours, it's not clear if the Status Attestation, while being valid (expiration datetime) cannot be used after the validity time (expired validity)

@pietroACN pietroACN changed the title [Credential Lifecycle - Status Attestation ] - Functional Requirements [Credential Lifecycle - Status Attestation ] - Functional Requirements - Status Attestation Apr 16, 2024
@peppelinux
Copy link
Member

peppelinux commented May 2, 2024

status attestations are short lived and cannot expire after the expiration of the credential where they are bound to, eg: credential expires in the next 5 hours, the linked status attestation cannot expire after the next 5 hours.

expiration is part of the validity evaluation, while validity is a more complex concept that brings signature verification, revocation verification, issuer revocation and so on.

@peppelinux peppelinux added the invalid This doesn't seem right label May 2, 2024
@peppelinux peppelinux added this to the 0.8.0 milestone May 13, 2024
@peppelinux peppelinux modified the milestones: 0.8.0, 0.8.1 Jun 12, 2024
@SaraConsoliACN
Copy link
Contributor

In my opinion, this issue can be considered resolved by the PR #308 in this section of the text: https://github.com/italia/eudi-wallet-it-docs/pull/308/files#:~:text=MUST%20contain%20the,the%20Digital%20Credential%3B.

@SaraConsoliACN
Copy link
Contributor

SaraConsoliACN commented Sep 12, 2024

Can we consider this issue closed and solved in PR #308 ?

@peppelinux peppelinux changed the title [Credential Lifecycle - Status Attestation ] - Functional Requirements - Status Attestation Status ASserrtion Oct 2, 2024
@peppelinux peppelinux changed the title Status ASserrtion Status Assertion lifecycle, validity period + not greater than Oct 2, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
invalid This doesn't seem right
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants