[VC Security & Trust Document] Improve description of holder binding

[Daniel Fett]

(Re “Cryptographic Holder Binding”)

Giuseppe De Marco

2023-03-06

An evil RP may receive a presentation of a VC with a signed nonce and re-present the same VC reusing the signed nonce to another RP (may we say nonce-reply?)

I’ve assumed that the presentation response should be signed with the private key linked to the public one binded in the VC.

[Daniel Fett]

@Giuseppe De Marco Can you please expand on this comment made for the Security and Trust document? How would the replay work if we assume that the verifier always expects a new nonce to be signed?

[Mark Haine]

Moving to new Repo under Digital Credentials Protocols WG