diff --git a/index.html b/index.html index 2fa7d5c3..6e94da91 100644 --- a/index.html +++ b/index.html @@ -1949,6 +1949,23 @@

Relationship to Verifiable Credentials

credential, might result in accepting data that ought to have been rejected.

+ +

+Finally, implementers are also urged to understand that there is a difference +between the revocation time and +expiration time for a verification method, +and the revocation information associated with a verifiable credential. +The revocation time and +expiration time for a verification method +are expressed using the `revocation` and `expires` properties, respectively, and +are related to events such as a private key being compromised or expiring and +can provide timing information which might reveal details about a controller +such as their security practices or when they might have been compromised. The +revocation information for a verifiable credential is expressed using +the `credentialStatus` property and is related to events such as an individual +losing the privilege that is granted by the verifiable credential and +does not provide timing information, which enhances privacy. +