You are here. See how this question connects to other ideas.
Select a node to open its page · Expand to read within the map
One question
Must a credential’s subject also be its holder?
Separate who makes a claim, who it describes, who presents it and who verifies it.
For one interaction, the issuer creates claims, the subject is what those claims describe, the holder possesses credentials and can generate a presentation, and the verifier receives and checks evidence.
A parent may hold and present a child’s credential: the child is the subject and the parent the holder. An entity can also take different roles in different interactions. A wallet does not become an issuer simply by storing credentials.
A resource credential may describe a space or another object. The service must separately establish the presenter’s authority to use that resource. Possessing a credential file is not complete authorization.
Sources and further reading
Check your understanding
Does a parent presenting a child’s credential become its subject?
No. Holder and subject are distinct roles.