Credential Revocation mechanism implementation (IETF Token Status List) #90
Description
Currently, the credential issuers in the wwWallet ecosystem lack a mechanism to revoke credentials.
After examining some of the revocation mechanisms available:
- CRL
- IETF Token Status List
- Online Certificate Status Protocol (OCSP)
The IETF Token Status List seems to be more fitted to the Verifiable Credentials ecosystem by providing unobservability when Relying Party attempts to access the status of a specific credential in the status list of the credential issuer.
Proposed draft to be implemented https://datatracker.ietf.org/doc/draft-ietf-oauth-status-list/