Skip to content

Commit 4c86e64

Browse files
authored
Fix formatting issue introduced by the reintroduction of the DID paragraph in -07 (#280)
* add -08 placeholder to doc history * Fix formatting issue introduced by the reintroduction of the DID paragraph in -07
1 parent efc9a7c commit 4c86e64

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

draft-ietf-oauth-sd-jwt-vc.md

+3
Original file line numberDiff line numberDiff line change
@@ -344,6 +344,7 @@ obtain the public key using JWT VC Issuer Metadata as defined in (#jwt-vc-issuer
344344
1. obtain the public key from the end-entity certificate of the certificates from the `x5c` header parameter of the Issuer-signed JWT and validate the X.509 certificate chain accordingly, and
345345
2. ensure that the `iss` value matches a `uniformResourceIdentifier` SAN entry of the end-entity certificate or that the domain name in the `iss` value matches the `dNSName` SAN entry of the end-entity certificate.
346346
- DID Document Resolution: If a recipient supports DID Document Resolution and if the `iss` value contains a DID [@W3C.DID], the recipient MUST retrieve the public key from the DID Document resolved from the DID in the `iss` value. In this case, if the `kid` JWT header parameter is present, the `kid` MUST be a relative or absolute DID URL of the DID in the `iss` value, identifying the public key.
347+
347348
Separate specifications or ecosystem regulations MAY define rules complementing the rules defined above, but such rules are out of scope of this specification. See (#ecosystem-verification-rules) for security considerations.
348349

349350
If a recipient cannot validate that the public verification key corresponds to the `iss` value of the Issuer-signed JWT, the SD-JWT VC MUST be rejected.
@@ -1570,6 +1571,8 @@ for their contributions (some of which substantial) to this draft and to the ini
15701571

15711572
-08
15721573

1574+
* Fix formatting issue introduced by the reintroduction of the DID paragraph in -07
1575+
15731576
-07
15741577

15751578
* Revert change from previous release that removed explicit mention of DIDs in the Issuer-signed JWT Verification Key Validation section

0 commit comments

Comments
 (0)