W3C home > Mailing lists > Public > public-credentials@w3.org > September 2017

Re: Verifiable Claims expiration

From: Christopher Allen <ChristopherA@blockstream.com>
Date: Mon, 18 Sep 2017 22:05:17 +0000
Message-ID: <CA+HTxFfHSO4ON=-ikvLvtv-mUuesw2LaooBC13u5RPmrrzCbXg@mail.gmail.com>
To: Joe Andrieu <joe@joeandrieu.com>, Matt Stone <matt.stone@pearson.com>, moses.ma@futurelabconsulting.com, public-credentials@w3.org
Even if a cryptographic system is eventually compromised or keys are
revoked for reasons other than fraud, a long-lived or non-expiring
verifiable claim with a PoE timestamp can still be valid provided that the
claim existed sufficiently before the compromise or revocation.

If the PoE timestamp is comprised that is another story, but today they
largely are dome with modern hash algorithm's which look fairly strong
(possibly over-engineered) and are even relatively quantum resistant.

-- Christopher Allen [via iPhone]
Received on Monday, 18 September 2017 22:05:49 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 19:18:13 UTC