arf-topic-v-pid-rulebook-discussion

PID attestations require privacy considerations like unlinkability, selective disclosure, and salted data. The EUDI Wallet framework uses these mechanisms alongside Zero-Knowledge Proofs to minimize data exposure and prevent cross-service tracking during credential presentation.

The best attestation format for PID issuance depends on interoperability needs. You can compare ISO/IEC-based, JWT-like, and W3C VCDM formats to weigh their pros and cons regarding privacy features, security requirements, and ecosystem compatibility within the EUDI Wallet framework.

The PID Rulebook aligns with the ARF by identifying necessary additions and changes to the Architecture Reference Framework. It analyzes current technical specifications and design decisions to ensure consistency, security, and interoperability within the EUDI Wallet ecosystem.

Zero-Knowledge Proofs and selective disclosure in PID work by allowing users to share only specific attributes rather than the full credential. Salting techniques further protect the data, ensuring unlinkability and enhanced privacy when attestations are issued and verified.

Interoperability challenges between W3C VCDM and SD-JWT formats involve differing data models and disclosure mechanisms. Analyzing these JWT-like and VCDM formats reveals structural variations affecting selective disclosure, cryptographic signatures, and cross-platform PID validation.

You should not use a specific attestation format for PID when it compromises unlinkability or fails to meet EUDI Wallet security requirements. Limitations arise if the format lacks selective disclosure support or fails ARF interoperability standards.