Merge pull request #181 from w3c/issue-180

Disallow vc and vp claims in head or payloads
w3c · Nov 25, 2023 · cb9ed27 · cb9ed27
2 parents accc0aa + 33f065a
commit cb9ed27
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/index.html b/index.html
@@ -1179,8 +1179,14 @@ <h2>Securing Verifiable Credentials</h2>
         required to be secured or integrity protected or to contain a
         <code>proof</code> member.
       </p>
-      <p>Issuers, Holders, and Verifiers MUST ignore all JWT Claims Sets that
-        have no integrity protection.</p>
+      <p>
+        Issuers, Holders, and Verifiers MUST ignore all JWT Claims Sets that
+        have no integrity protection.
+      </p>
+      <p>
+        The JWT Claim Names <code>vc</code> and <code>vp</code>
+        MUST NOT be present in any JWT Claims Set.
+      </p>
     </section>
 
 </section>