Skip to content

Commit

Permalink
Make revocation consistent
Browse files Browse the repository at this point in the history
  • Loading branch information
expede committed Nov 2, 2023
1 parent a11305d commit 0977671
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion README.md
Expand Up @@ -395,7 +395,7 @@ This store SHOULD be indexed by CID (content addressing). Multiple indices built

Aside from revocation, capability validation is idempotent. Marking a CID (or capability index inside that CID) as valid acts as memoization, obviating the need to check the entire structure on every validation. This extends to distinct UCANs that share a proof: if the proof was previously reviewed and is not revoked, it is RECOMMENDED to consider it valid immediately.

Revocation is irreversible. Suppose the validator learns of revocation by UCAN CID or issuer DID. In that case, the UCAN and all of its derivatives in such a cache MUST be marked as invalid, and all validations immediately fail without needing to walk the entire structure.
Revocation is irreversible. Suppose the validator learns of revocation by UCAN CID. In that case, the UCAN and all of its derivatives in such a cache MUST be marked as invalid, and all validations immediately fail without needing to walk the entire structure.

## 5.3 Replay Attack Prevention

Expand Down

0 comments on commit 0977671

Please sign in to comment.