Skip to content

Adds description of Favoring Abstract Claims #43

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Apr 14, 2017
Merged

Adds description of Favoring Abstract Claims #43

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
f61ae37
Adds explanation and example for Favoring Abstract Claims under priva…
ottonomy Mar 14, 2017
082165f
Improvement to wording of Favoring Abstract Claims instruction.
ottonomy Mar 14, 2017
fca4171
Match existing formatting from the rest of the document in 5.6
ottonomy Mar 14, 2017
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 8 additions & 2 deletions index.html
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1230,8 +1230,14 @@ <h3>Device Fingerprinting</h3>
<section>
<h3>Favor Abstract Claims</h3>

<p class="issue">
Favor “proof of” vs. “actual data”. Example: overAge: 21 vs. birthdate.
<p>
In order to enable recipients of verifiable claims to use them in a variety of circumstances without revealing more personally identifiable information than necessary for the transaction, issuers should consider limiting the information published in a claim to a minimal set needed for the expected purposes.
One way to avoid placing personally identifiable information in a claim is to use an "abstract" property that meets the needs of inspectors without providing specific information about the subject.
</p>
<p>
An example in this document is the use of the <code>ageOver</code> property as opposed to a specific birthdate that would constitute much stronger personally identifiable information.
If retailers in a market commonly require purchasers to be older than a specific age, an issuer trusted in that market may choose to offer a credential claiming that subjects have met that requirement as opposed to offering claims of their specific birthdates.
This enables individual customers to purchase items without revealing specific personally identifiable information.
</p>
</section>

Expand Down