Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Provide guidance on choosing validity periods for status lists. #190

Merged
merged 4 commits into from
Dec 8, 2024
Merged
Changes from 3 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
39 changes: 39 additions & 0 deletions index.html
Original file line number Diff line number Diff line change
Expand Up @@ -1678,6 +1678,45 @@ <h3>Bitstring Encoding</h3>
</p>
</section>

<section class="informative">
<h3>Validity Periods</h3>

<p>
The <a data-cite="?VC-DATA-MODEL-2.0#validity-period">validity period</a> of a
status list is dependent on a variety of factors including:
msporny marked this conversation as resolved.
Show resolved Hide resolved
</p>
<ul>
<li>
How often do status values change? In real-time? Daily? Weekly? Monthly?
msporny marked this conversation as resolved.
Show resolved Hide resolved
</li>
<li>
Is there a regulatory requirement that compels an [=issuer=] to notify a
[=verifier=] that the status of a [=verifiable credential=] has changed?
</li>
<li>
Is there a period of time after which an [=issuer=] would incur reputational
damage by not notifying a [=verifier=] of a status change?
</li>
<li>
Is there an expectation by a [=verifier=] to not accept a
[=verifiable credential=] with a status list that does not expire for an
excessive period of time?
msporny marked this conversation as resolved.
Show resolved Hide resolved
</li>
<li>
Is there an excessive network bandwidth or computing burden placed upon an
[=issuer=] or a [=verifier=] if a validity period is too short for a
status list?
msporny marked this conversation as resolved.
Show resolved Hide resolved
</li>
</ul>

<p>
Since these factors vary based on ecosystem and credential type, there is no
minimum or maximum validity period that is suggested for a status list.
[=Issuers=] will need to take various considerations into account that are
specific to their [=verifiable credential=] types and pick validity periods that
will strike the right balance in their ecosystem.
msporny marked this conversation as resolved.
Show resolved Hide resolved
</p>
</section>

</section>

Expand Down