3 ms·
It's tricky when the whole chunk of data is only signed over once by your issuer - you can't go back to the government for a new token every time you want to gi
by hirsin 4y ago
It's tricky when the whole chunk of data is only signed over once by your issuer - you can't go back to the government for a new token every time you want to give out your first name instead of first and last name.
This is where SD-jwt comes in - https://datatracker.ietf.org/doc/draft-fett-oauth-selective-disclosure-jwt/ https://datatracker.ietf.org/doc/draft-fett-oauth-selective-..., which selectively offers pieces from that once-signed chunk of data.