Skip to content

Commit c37a0a9

Browse files
authored
Merge pull request #251 from ietf-wg-scitt/issue-232
Add section for refreshing receipts
2 parents 9db0d0e + 2d7042f commit c37a0a9

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

draft-ietf-scitt-architecture.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -295,7 +295,8 @@ Transparency is implemented by providing a consistent, append-only, cryptographi
295295
A SCITT instance is referred to as a Transparency Service.
296296
Implementations of Transparency Services may protect their Append-only Log using a combination of trusted hardware, replication and consensus protocols, and cryptographic evidence.
297297
A Receipt is an offline, universally-verifiable proof that an entry is recorded in the Append-only Log.
298-
Receipts do not expire, but it is possible to append new entries (more recent Signed Statements) that subsume older entries (less recent Signed Statements).
298+
Requesting a receipt can result in the production of a new receipt for the same signed statement.
299+
A Receipt's verification key, signing algorithm, validity period, header parameters or other claims MAY change each time a Receipt is produced.
299300

300301
Anyone with access to the Transparency Service can independently verify its consistency and review the complete list of Transparent Statements registered by each Issuer.
301302
However, the Registrations on a separate Transparency Service is generally disjoint, though it is possible to take a Transparent Statement (i.e. a Signed Statement with a Receipt in its unprotected header, from a from the first Transparency Service) and register it on another Transparency Service, where the second Receipt will be over the first Receipt in the unprotected header.

0 commit comments

Comments
 (0)