Skip to content

Commit 7131245

Browse files
author
ID Bot
committed
Script updating gh-pages from 9eae2cb. [ci skip]
1 parent f055b52 commit 7131245

2 files changed

Lines changed: 2 additions & 2 deletions

File tree

pb/review_roman/draft-ietf-oauth-status-list.html

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1542,7 +1542,7 @@ <h3 id="name-example-use-cases">
15421542
<h3 id="name-rationale">
15431543
<a href="#section-1.2" class="section-number selfRef">1.2. </a><a href="#name-rationale" class="section-name selfRef">Rationale</a>
15441544
</h3>
1545-
<p id="section-1.2-1">Revocation mechanisms are an essential part of most identity ecosystems. In the past, revocation of X.509 TLS certificates has been proven difficult. Traditional certificate revocation lists (CRLs) have limited scalability; Online Certificate Status Protocol (OCSP) has additional privacy risks, since the client is leaking the requested website to a third party. OCSP stapling is addressing some of these problems at the cost of less up-to-date data. Approaches based on cryptographic accumulators and Zero-Knowledge-Proofs try to accommodate for this privacy gap, but are currently facing scalability issues and are not yet standardized. Another alternative is short-lived Referenced Tokens with regular re-issuance, but this puts additional burden on the Issuer's infrastructure.<a href="#section-1.2-1" class="pilcrow"></a></p>
1545+
<p id="section-1.2-1">Revocation mechanisms are an essential part of most identity ecosystems. In the past, revocation of X.509 TLS certificates has been proven difficult. Traditional certificate revocation lists (CRLs) have limited scalability; Online Certificate Status Protocol (OCSP) has additional privacy risks, since the client is leaking the requested website to a third party. OCSP stapling is addressing some of these problems at the cost of less up-to-date data. Approaches based on cryptographic accumulators and Zero-Knowledge-Proofs try to accommodate for this privacy gap, but are currently (in 2026) facing scalability issues and are not yet standardized. Another alternative is short-lived Referenced Tokens with regular re-issuance, but this puts additional burden on the Issuer's infrastructure.<a href="#section-1.2-1" class="pilcrow"></a></p>
15461546
<p id="section-1.2-2">This specification seeks to find a balance between scalability, security and privacy by representing statuses as individual bits, packing them into an array, and compressing the resulting binary data. Thereby, a Status List may contain statuses of many thousands or millions Referenced Tokens while remaining as small as possible. Placing a large number of Referenced Tokens into the same list also offers Holders and Relying Parties herd privacy from the Status Provider.<a href="#section-1.2-2" class="pilcrow"></a></p>
15471547
</section>
15481548
</div>

pb/review_roman/draft-ietf-oauth-status-list.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -278,7 +278,7 @@ Table of Contents
278278
requested website to a third party. OCSP stapling is addressing some
279279
of these problems at the cost of less up-to-date data. Approaches
280280
based on cryptographic accumulators and Zero-Knowledge-Proofs try to
281-
accommodate for this privacy gap, but are currently facing
281+
accommodate for this privacy gap, but are currently (in 2026) facing
282282
scalability issues and are not yet standardized. Another alternative
283283
is short-lived Referenced Tokens with regular re-issuance, but this
284284
puts additional burden on the Issuer's infrastructure.

0 commit comments

Comments
 (0)