[Openid-specs-ab] Issue #1871: (SIOP) Analyise the relationship between k-anonymity and wallet (openid/connect)

Nat issues-reply at bitbucket.org
Fri Mar 10 05:49:19 UTC 2023


New issue 1871: (SIOP) Analyise the relationship between k-anonymity and wallet
https://bitbucket.org/openid/connect/issues/1871/siop-analyise-the-relationship-between-k

Nat Sakimura:

In the case of cloud based wallet \(aka IdP\), not only k-anonymity but pairwise pseudonymity is lost if there is only one user. My IdP is like that. 

It probably is worth analysing if similar risk exists for mobile wallets / SIOP. 

Whether or not if the risk exists, it a summary of the analysis should go into the Privacy Consideration. 

I have marked the component as SIOP but it may also have impacts on OIDC4VP.


More information about the Openid-specs-ab mailing list