From c9b96b4436de8e1f5d2b64818c2e3b60969da5aa Mon Sep 17 00:00:00 2001 From: Patrick St-Louis <43082425+PatStLouis@users.noreply.github.com> Date: Tue, 4 Jun 2024 14:54:55 -0400 Subject: [PATCH] Apply suggestions from code review Co-authored-by: Ted Thibodeau Jr --- index.html | 22 ++++++++++++---------- 1 file changed, 12 insertions(+), 10 deletions(-) diff --git a/index.html b/index.html index f0215ee..864be55 100644 --- a/index.html +++ b/index.html @@ -1186,25 +1186,27 @@

Error Handling

when identifying technical friction impacting interoperability.

- Other fields such as [detail](https://www.rfc-editor.org/rfc/rfc9457.html#name-detail), - [instance](https://www.rfc-editor.org/rfc/rfc9457.html#name-instance) + Leveraging other fields such as [detail](https://www.rfc-editor.org/rfc/rfc9457.html#name-detail), + [instance](https://www.rfc-editor.org/rfc/rfc9457.html#name-instance), and [type](https://www.rfc-editor.org/rfc/rfc9457.html#name-type) - are encouraged to be leveraged to provide more contextual feedback about the error, - while being conscious of not disclosing sensitive information for security concerns. + is encouraged, to provide more contextual feedback about the error, + while being conscious of security concerns and hence not disclosing + sensitive information.

- Implementers should try to handle all server errors in the best of their capabilities. - Endpoints should avoid returning improperly handled 500 errors in a production - environment leading to potential [information disclosure](https://owasp.org/www-community/Improper_Error_Handling). + Implementers should handle all server errors to the best of their capabilities. + Endpoints should avoid returning improperly handled 500 errors in production + environments, as these may lead to [information disclosure](https://owasp.org/www-community/Improper_Error_Handling).

Relationship between verification and error handling

- While performing [verification](https://w3c.github.io/vc-data-model/#verification), - an implementer should avoid raising errors and instead gather + An implementer should avoid raising errors while performing + [verification](https://w3c.github.io/vc-data-model/#verification), + and instead should gather [ProblemDetails](https://w3c.github.io/vc-data-model/#problem-details) objects to include in the verification results.

-

ProblemDetails Types

+

Types of ProblemDetails

[PARSING_ERROR](https://www.w3.org/TR/vc-data-model#PARSING_ERROR)
[STATUS_NOT_UPDATED_ERROR](https://www.w3.org/TR/vc-data-model#STATUS_NOT_UPDATED_ERROR)
[CRYPTOGRAPHIC_SECURITY_ERROR](https://www.w3.org/TR/vc-data-model#CRYPTOGRAPHIC_SECURITY_ERROR)