Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clarify what is stored on the ledger #329

Open
2 tasks
SteveLasker opened this issue Dec 20, 2024 · 0 comments · May be fixed by #335
Open
2 tasks

Clarify what is stored on the ledger #329

SteveLasker opened this issue Dec 20, 2024 · 0 comments · May be fixed by #335

Comments

@SteveLasker
Copy link
Collaborator

A reader of the Arch doc may assume the content of the signed statements is stored on the Ledger, as opposed to verifiable proofs of the signed statement.
This has evolved over time as, at least some of us, assumed the signed statement was stored on the ledger.
The current belief of the authors is the ledger stores "hashes", verifiable proofs of the signed statement, that can live forever without concerns of PII information. However, the current state of the doc doesn't really qualify this distinction.

Storing the actual signed statement, including the payload, or other elements of the protected header on the ledger also raises PII information concerns, such as #322

A complete Transparency Service may provide ancillary services that may store the content of the signed statement, or even the contents of a hashed payload, however that's beyond the scope of the SCITT Draft.

This issue tracks:

  • Clarifying the ledger only stores "proofs" (or a better agreed upon term)
  • Clarifying a service may store the signed statements, but likely not on the ledger so they can delete and/or redact PII information that may be written (intentionally or accidentally)
SteveLasker added a commit that referenced this issue Dec 23, 2024
@SteveLasker SteveLasker linked a pull request Dec 23, 2024 that will close this issue
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant