w3c
Minimizing the extent of profiling of requestors
This issue is created based on https://github.com/w3c/did-resolution/issues/81#issuecomment-2349162179 by @mccown, which I am copying here:
Resolvers, inherently, provide a natural point where the resolver provider can log requests and use them for tracking or profiling. One sub-section worth adding might be a short discussion on ways that resolutions could be performed while also minimizing the extent by which requestors could be profiled.
This was discussed during the #did meeting on 27 February 2025.
View the transcript
w3c/did-resolution#95
Minimizing the extent of profiling of requestors #95
wip: is there an action on this one?
<manu> +1 privacy considerations
markus_sabadello: yes this came up in November, its newer...
markus_sabadello: I think its still valid, perhaps to be addressed in the security considerations...
wip: ok sounds good...
wip: ok last thing I want to mention....
wip: about the APAC call... I have moved to an EU friendly time...
wip: it will be interesting to see who from the APAC time zone joins...
It was mentioned by @msporny in today's DID WG meeting that we should also consider the use of OHTTP in DID Resolution https://datatracker.ietf.org/doc/rfc9458/
This has been addressed by https://github.com/w3c/did-resolution/pull/157.