diff --git a/index.html b/index.html index 07f6141..0c9f0b4 100644 --- a/index.html +++ b/index.html @@ -122,9 +122,12 @@ href: "https://www.rfc-editor.org/info/bcp47", publisher: "IETF", }, - ENTRY: { - title: "Example Title", - href: "https://website.example/document", + "SD-JWT-VC": { + title: "SD-JWT-based Verifiable Credentials (SD-JWT VC)", + href: "https://datatracker.ietf.org/doc/html/draft-ietf-oauth-sd-jwt-vc", + authors: ["Oliver Terbu", "Daniel Fett", "Brian Campbell"], + status: "Internet-Draft", + publisher: "IETF", }, }, lint: {"no-unused-dfns": false}, @@ -1053,8 +1056,7 @@

Output Preferences

mediaType An OPTIONAL [=string=] stating a valid media type listed in the -IANA Media Types preferred for rendering. This value MAY be used when +[[[IANA-MEDIA-TYPES|IANA Media Types]]] preferred for rendering. This value MAY be used when suggesting addtional processing prior to rendering. Examples include converting an SVG payload into a static image or an HTML document into a PDF. @@ -1281,8 +1283,8 @@

Host Page

This filtering MUST be done by applying the `selectJsonLd` algorithm defined in -Section 3.4.13 selectJsonLd -of the Data Integrity ECDSA Cryptosuites v1.0 specification [[VC-DI-ECDSA]] to +[[[VC-DI-ECDSA#selectjsonld|Section 3.4.13 selectJsonLd]]] +of the [[[VC-DI-ECDSA]]] specification to the JSON Pointer [[RFC6901]] values present in `renderMethod.renderProperty`.

@@ -1541,9 +1543,8 @@

Client-Determined Rendering

Uncontrolled Credential Presentation. Credential formats such as -ISO/IEC 18013-5 mobile driving -licence (mDL) and the JSON Web Tokens -(RFC 7519) take this +[[[ISO18013-5|ISO/IEC 18013-5 mobile driving licence (mDL)]]] and the JSON Web +Tokens [[RFC7519]] take this approach, defining the claims a credential carries but leaving their presentation to the consuming software. Microsoft's Information Card @@ -1577,7 +1578,7 @@

Credential-Type-Specific Display Registries

the distributed, decentralized, and permissionless patterns otherwise specified to be part of the ecosystem of [[[DID|Decentralized Identifiers (DIDs)]]] and -[[[VC-DATA-MODEL|Verifiable Credentials (VCs)]]]. +[[[VC-DATA-MODEL-2.1|Verifiable Credentials (VCs)]]].

@@ -1601,17 +1602,16 @@

Data Integrity and Proof Mechanisms

[[[VC-DATA-INTEGRITY#resource-integrity|digestMultibase]]] property to bind a referenced payload to the credential. Readers can learn about these general protection mechanisms by reading about the - -Tampering with Unprotected External Resources threat in the - -Verifiable Credential Threat Model. +[[[VC-DATA-MODEL-THREAT-MODEL-2.1#tampering-with-unprotected-external-resources|Tampering +with Unprotected External Resources]]] threat in the +[[[VC-DATA-MODEL-THREAT-MODEL-2.1|Verifiable Credential Threat Model]]].

SD-JWT VC Type Metadata Rendering

-SD-JWT VC +[[[SD-JWT-VC#section-4.5.1|SD-JWT VC]]] defines a `rendering` property to choose between a `simple` method that supports a fixed set of styling attributes, and an `svg_templates` method that forbids any code execution and substitutes claim values into text placeholders in an diff --git a/threat-model/index.html b/threat-model/index.html index 16de4ab..2995c8b 100644 --- a/threat-model/index.html +++ b/threat-model/index.html @@ -47,8 +47,7 @@

This document describes a threat model for the -Verifiable Credentials -Render Method specification. It identifies and analyzes security and +[[[VC-RENDER-METHOD|Verifiable Credentials Render Method]]] specification. It identifies and analyzes security and privacy threats specific to the publication, retrieval, and processing of render methods used to produce a human-readable rendering of a [=verifiable credential=]. @@ -76,8 +75,7 @@

Introduction

This threat model follows the methodology described in the -W3C Threat Modeling -Guide and classifies threats using the STRIDE taxonomy. Threats are +[[[THREAT-MODELING-GUIDE|W3C Threat Modeling Guide]]] and classifies threats using the STRIDE taxonomy. Threats are grouped into five categories: