Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Inconsistency regarding possibility of trust chain loops #185

Open
zachmann opened this issue Feb 3, 2025 · 1 comment
Open

Inconsistency regarding possibility of trust chain loops #185

zachmann opened this issue Feb 3, 2025 · 1 comment

Comments

@zachmann
Copy link
Collaborator

zachmann commented Feb 3, 2025

Section 10.1 says

Federation participants MUST NOT attempt to fetch Entity Statements they already have obtained during this process to prevent loops. An invalid_trust_chain error SHOULD be returned if a loop is encountered.

Section 16.1 Federation topologies states

Also, as described in Section 10.1 Federation topologies MUST NOT contain loops.

However, I cannot see that 10.1 forbids loops in the federation topology. It only states that participants MUST NOT fetch stmts they already have, i.e. this is a mechanism to deal with the possibility of loops.

Do we want to forbid trust chain loops? Then this should be made more prominent in the spec and 10.1 should be adapted. If not, the statement should be removed from 16.1

@cicnavi
Copy link
Collaborator

cicnavi commented Feb 3, 2025

This is from #161, addressed with PR #164

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants