Security

Reporting a flaw in the protocol

If you find a weakness in ProofID 101 itself (a way to sign as a component you do not own, to make a Subject's proof apply to a different Subject, to make a dependent party look independent, to act outside a Scope without detection, or to reuse an identity after revocation), report it privately to the maintainer, Craig Thomas Ellrod, before public disclosure. Open a GitHub security advisory on this repository or contact the maintainer directly.

What this repository never contains

No private keys, credentials, network identifiers of a real environment, or customer data. Examples in schemas/examples use placeholder keys, signatures, and identifiers.