-
Notifications
You must be signed in to change notification settings - Fork 8
feat(readme): add FAQ section #64
base: main
Are you sure you want to change the base?
Conversation
README.md
Outdated
## FAQ | ||
|
||
<details> | ||
<summary>What is an Identifier?</summary> |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can we split this up into the specific terms used in the SDK: plaintextIdentifier
, obfuscatedIdentifier
and making the differences clear? (Maybe even some text examples of what each of these looks like)
This glossary may be helpful for reusing some definitions here + elsewhere!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Will create a Mermaid diagram instead to explain the terminologies.
README.md
Outdated
<details> | ||
<summary>Does Issuer need to pay for gas?</summary> | ||
|
||
Yes, Issuer pays for gas every time it wants to attest a new user. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this isn't strictly true--the issuer only pays for gas if they publish the attestations on-chain on behalf of the user. Issuers can return the signed attestation to the user, who can then choose to publish this to FederatedAttestations.sol
or not.
<details> | ||
<summary>Does Issuer need to have ODIS quota?</summary> | ||
|
||
Yes, Issuer needs to have ODIS Quota to register and lookup users. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is recommended but not strictly required; recommended since it promotes interoperable identifiers. This isn't necessary when issuers do not care about identifiers that use ODIS peppers; in these cases issuers can also use proprietary prefixes/salts, which means giving up interoperability but provides additional security
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Does it mean that users can do the ODIS part themselves and then simply provide the obfuscatedIdentifier
to be registered under the respective issuer?
Same for lookup.
Technically that would mean the authSigner
will be the user requesting registration and the dApp would basically look up its balance and request to buy quota in-app, right?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
In the case of proprietary prefixes, wouldn't it be mandatory for issuers to have ODIS quota?
I am assuming the issuer wouldn't want its users to know the prefix and thus will have to perform the process of getting the obfuscatedIdentifier
itself.
README.md
Outdated
</details> | ||
|
||
<details> | ||
<summary>What are some security & trust assumptions differences between the Asv1 vs. Social Connect?</summary> |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
nit: capitalize ASv1
@0xarthurxyz please suggest anymore questions you would like me to add here