Script updating gh-pages from 660506d. [ci skip]

Author: ID Bot

pb/ref_sd_jwt_instead_of_vc/draft-ietf-oauth-status-list.html

@@ -2313,7 +2313,7 @@ <h3 id="name-status-list-response">
         <h3 id="name-validation-rules">
 <a href="#section-8.3" class="section-number selfRef">8.3. </a><a href="#name-validation-rules" class="section-name selfRef">Validation Rules</a>
         </h3>
-<p id="section-8.3-1">Upon receiving a Referenced Token, a Relying Party <span class="bcp14">MUST</span> first perform the validation of the Referenced Token - e.g., checking for expected attributes, valid signature and expiration time. The processing rules for Referenced Tokens (such as JWT or CWT) <span class="bcp14">MUST</span> precede any evaluation of a Referenced Token's status. For example, if a token is evaluated as being expired through the "exp" (Expiration Time) but also has a status of 0x00 ("VALID"), the token is considered expired. As this is out of scope for this document, this validation is not described here, but is expected to be done according to the format of the Referenced Token.<a href="#section-8.3-1" class="pilcrow">¶</a></p>
+<p id="section-8.3-1">Upon receiving a Referenced Token, a Relying Party <span class="bcp14">MUST</span> first perform the validation of the Referenced Token - e.g., checking for expected attributes, valid signature and expiration time. The processing rules for Referenced Tokens (such as JWT or CWT) <span class="bcp14">MUST</span> precede any evaluation of a Referenced Token's status. For example, if a token is evaluated as being expired through the "exp" (Expiration Time) but also has a status of 0x00 ("VALID"), the token is considered expired. If the validation procedures for the Referenced Token determine it is invalid, no further procedures regarding Status List <span class="bcp14">MUST</span> be performed, e.g. fetching a Status List Token, unless the Referenced Token procedures or the use case require further evaluation.<a href="#section-8.3-1" class="pilcrow">¶</a></p>
 <p id="section-8.3-2">If this validation is not successful, the Referenced Token <span class="bcp14">MUST</span> be rejected. If the validation was successful, the Relying Party <span class="bcp14">MUST</span> perform the following validation steps to evaluate the status of the Referenced Token:<a href="#section-8.3-2" class="pilcrow">¶</a></p>
 <ol start="1" type="1" class="normal type-1" id="section-8.3-3">
 <li id="section-8.3-3.1">
@@ -4521,6 +4521,9 @@ <h2 id="name-document-history">
 <ul class="normal">
 <li class="normal" id="appendix-D-3.1">
           <p id="appendix-D-3.1.1">change SD-JWT VC reference to SD-JWT<a href="#appendix-D-3.1.1" class="pilcrow">¶</a></p>
+</li>
+        <li class="normal" id="appendix-D-3.2">
+          <p id="appendix-D-3.2.1">clarify that Status List validation <span class="bcp14">MUST</span> not be performed if Referenced Token validation is deemed invalid already<a href="#appendix-D-3.2.1" class="pilcrow">¶</a></p>
 </li>
       </ul>
 <p id="appendix-D-4">-16<a href="#appendix-D-4" class="pilcrow">¶</a></p>

pb/ref_sd_jwt_instead_of_vc/draft-ietf-oauth-status-list.txt

@@ -1093,9 +1093,10 @@ d2                              # tag(18)
    evaluation of a Referenced Token's status.  For example, if a token
    is evaluated as being expired through the "exp" (Expiration Time) but
    also has a status of 0x00 ("VALID"), the token is considered expired.
-   As this is out of scope for this document, this validation is not
-   described here, but is expected to be done according to the format of
-   the Referenced Token.
+   If the validation procedures for the Referenced Token determine it is
+   invalid, no further procedures regarding Status List MUST be
+   performed, e.g. fetching a Status List Token, unless the Referenced
+   Token procedures or the use case require further evaluation.
 
    If this validation is not successful, the Referenced Token MUST be
    rejected.  If the validation was successful, the Relying Party MUST
@@ -3107,6 +3108,9 @@ Document History
 
    *  change SD-JWT VC reference to SD-JWT
 
+   *  clarify that Status List validation MUST not be performed if
+      Referenced Token validation is deemed invalid already
+
    -16
 
    *  change http status codes & query parameter wording for the