From f702916da10f50e5f3643ec098e76283c983f503 Mon Sep 17 00:00:00 2001 From: Dmitri Zagidulin Date: Tue, 13 Oct 2026 10:34:17 -0400 Subject: [PATCH] Convert direct links to ReSpec citations. Signed-off-by: Dmitri Zagidulin --- index.html | 32 +++++++++---------- threat-model/index.html | 14 ++++---- ...-uncontrolled-credential-presentation.yaml | 7 ++-- ...t2-unsafe-rendering-of-untrusted-data.yaml | 8 ++--- ...ing-via-template-and-resource-fetches.yaml | 11 +++---- 5 files changed, 34 insertions(+), 38 deletions(-) diff --git a/index.html b/index.html index 07f6141..0c9f0b4 100644 --- a/index.html +++ b/index.html @@ -122,9 +122,12 @@ href: "https://www.rfc-editor.org/info/bcp47", publisher: "IETF", }, - ENTRY: { - title: "Example Title", - href: "https://website.example/document", + "SD-JWT-VC": { + title: "SD-JWT-based Verifiable Credentials (SD-JWT VC)", + href: "https://datatracker.ietf.org/doc/html/draft-ietf-oauth-sd-jwt-vc", + authors: ["Oliver Terbu", "Daniel Fett", "Brian Campbell"], + status: "Internet-Draft", + publisher: "IETF", }, }, lint: {"no-unused-dfns": false}, @@ -1053,8 +1056,7 @@

Output Preferences

mediaType An OPTIONAL [=string=] stating a valid media type listed in the -IANA Media Types preferred for rendering. This value MAY be used when +[[[IANA-MEDIA-TYPES|IANA Media Types]]] preferred for rendering. This value MAY be used when suggesting addtional processing prior to rendering. Examples include converting an SVG payload into a static image or an HTML document into a PDF. @@ -1281,8 +1283,8 @@

Host Page

This filtering MUST be done by applying the `selectJsonLd` algorithm defined in -Section 3.4.13 selectJsonLd -of the Data Integrity ECDSA Cryptosuites v1.0 specification [[VC-DI-ECDSA]] to +[[[VC-DI-ECDSA#selectjsonld|Section 3.4.13 selectJsonLd]]] +of the [[[VC-DI-ECDSA]]] specification to the JSON Pointer [[RFC6901]] values present in `renderMethod.renderProperty`.

@@ -1541,9 +1543,8 @@

Client-Determined Rendering

Uncontrolled Credential Presentation. Credential formats such as -ISO/IEC 18013-5 mobile driving -licence (mDL) and the JSON Web Tokens -(RFC 7519) take this +[[[ISO18013-5|ISO/IEC 18013-5 mobile driving licence (mDL)]]] and the JSON Web +Tokens [[RFC7519]] take this approach, defining the claims a credential carries but leaving their presentation to the consuming software. Microsoft's Information Card @@ -1577,7 +1578,7 @@

Credential-Type-Specific Display Registries

the distributed, decentralized, and permissionless patterns otherwise specified to be part of the ecosystem of [[[DID|Decentralized Identifiers (DIDs)]]] and -[[[VC-DATA-MODEL|Verifiable Credentials (VCs)]]]. +[[[VC-DATA-MODEL-2.1|Verifiable Credentials (VCs)]]].

@@ -1601,17 +1602,16 @@

Data Integrity and Proof Mechanisms

[[[VC-DATA-INTEGRITY#resource-integrity|digestMultibase]]] property to bind a referenced payload to the credential. Readers can learn about these general protection mechanisms by reading about the - -Tampering with Unprotected External Resources threat in the - -Verifiable Credential Threat Model. +[[[VC-DATA-MODEL-THREAT-MODEL-2.1#tampering-with-unprotected-external-resources|Tampering +with Unprotected External Resources]]] threat in the +[[[VC-DATA-MODEL-THREAT-MODEL-2.1|Verifiable Credential Threat Model]]].

SD-JWT VC Type Metadata Rendering

-SD-JWT VC +[[[SD-JWT-VC#section-4.5.1|SD-JWT VC]]] defines a `rendering` property to choose between a `simple` method that supports a fixed set of styling attributes, and an `svg_templates` method that forbids any code execution and substitutes claim values into text placeholders in an diff --git a/threat-model/index.html b/threat-model/index.html index 16de4ab..2995c8b 100644 --- a/threat-model/index.html +++ b/threat-model/index.html @@ -47,8 +47,7 @@

This document describes a threat model for the -Verifiable Credentials -Render Method specification. It identifies and analyzes security and +[[[VC-RENDER-METHOD|Verifiable Credentials Render Method]]] specification. It identifies and analyzes security and privacy threats specific to the publication, retrieval, and processing of render methods used to produce a human-readable rendering of a [=verifiable credential=]. @@ -76,8 +75,7 @@

Introduction

This threat model follows the methodology described in the -W3C Threat Modeling -Guide and classifies threats using the STRIDE taxonomy. Threats are +[[[THREAT-MODELING-GUIDE|W3C Threat Modeling Guide]]] and classifies threats using the STRIDE taxonomy. Threats are grouped into five categories:

    @@ -116,8 +114,8 @@

    Description

    as part of evaluating it. The elements and flows introduced by the Render Method specification are shown in full color in the data flow diagram below; elements reused from the -Verifiable -Credentials Data Model threat model are shown grayed as context. +[[[VC-DATA-MODEL-THREAT-MODEL-2.1|Verifiable Credentials Data Model threat +model]]] are shown grayed as context.

    Note: We do NOT model potential attackers as @@ -185,8 +183,8 @@

    Dictionary

    The dictionary defines the data flow diagram elements introduced by the Render Method specification. Elements reused from the -Verifiable -Credentials Data Model threat model appear grayed in the diagram for +[[[VC-DATA-MODEL-THREAT-MODEL-2.1|Verifiable Credentials Data Model threat +model]]] appear grayed in the diagram for context and are defined in that document rather than repeated here.

    diff --git a/threat-model/threats/t1-uncontrolled-credential-presentation.yaml b/threat-model/threats/t1-uncontrolled-credential-presentation.yaml index 1ea1bd3..389a3a0 100644 --- a/threat-model/threats/t1-uncontrolled-credential-presentation.yaml +++ b/threat-model/threats/t1-uncontrolled-credential-presentation.yaml @@ -44,9 +44,8 @@ response: external resource. Because the render template is an external resource whose content affects how the credential is presented, the integrity considerations for it are a subset of - Tampering - with Unprotected External Resources in the [[[VC-DATA-MODEL-2.0]]] - threat model; readers are referred there for the full analysis and - responses. An issuer that intends to update branding or layout over time + [[[VC-DATA-MODEL-THREAT-MODEL-2.1#tampering-with-unprotected-external-resources|Tampering + with Unprotected External Resources]]]; readers are referred there for + the full analysis and responses. An issuer that intends to update branding or layout over time instead deliberately leaves the template mutable, accepting that previously issued credentials render using the updated template. diff --git a/threat-model/threats/t2-unsafe-rendering-of-untrusted-data.yaml b/threat-model/threats/t2-unsafe-rendering-of-untrusted-data.yaml index 4844050..15def3e 100644 --- a/threat-model/threats/t2-unsafe-rendering-of-untrusted-data.yaml +++ b/threat-model/threats/t2-unsafe-rendering-of-untrusted-data.yaml @@ -21,10 +21,10 @@ description: >- safe to render, so hostile content can arrive inside a well-formed, verified credential. At the level of the data model this threat is a render-time instance of - Code - Injection via Credential Content in the [[[VC-DATA-MODEL-2.0]]] threat - model; the additional concern here is that the render method deliberately - executes template-supplied code as part of rendering. + [[[VC-DATA-MODEL-THREAT-MODEL-2.1#code-injection-via-credential-content|Code + Injection via Credential Content]]]; the additional concern here is that + the render method deliberately executes template-supplied code as part of + rendering. response: - id: R1 name: Confine the Render Process diff --git a/threat-model/threats/t3-tracking-via-template-and-resource-fetches.yaml b/threat-model/threats/t3-tracking-via-template-and-resource-fetches.yaml index 51fcd00..3f09642 100644 --- a/threat-model/threats/t3-tracking-via-template-and-resource-fetches.yaml +++ b/threat-model/threats/t3-tracking-via-template-and-resource-fetches.yaml @@ -21,9 +21,9 @@ description: >- credential avoids the network requests entirely, at the cost of increasing the size of the credential, which can be significant for constrained devices. This threat is the render-time expression of - Device - Tracking and Fingerprinting in the [[[VC-DATA-MODEL-2.0]]] threat model, - to which readers are referred for the general analysis. + [[[VC-DATA-MODEL-THREAT-MODEL-2.1#device-tracking-and-fingerprinting|Device + Tracking and Fingerprinting]]], to which readers are referred for the + general analysis. response: - id: R1 name: Block Network Access During Rendering @@ -52,6 +52,5 @@ response: offline use and unlinkability embeds the template and its resources in the credential, accepting the increase in credential size. The general responses in - Device - Tracking and Fingerprinting in the [[[VC-DATA-MODEL-2.0]]] threat - model apply here as well. + [[[VC-DATA-MODEL-THREAT-MODEL-2.1#device-tracking-and-fingerprinting|Device + Tracking and Fingerprinting]]] apply here as well.