diff --git a/index.html b/index.html index 77b3a39..3c957fd 100644 --- a/index.html +++ b/index.html @@ -781,6 +781,20 @@

Table of Contents

Other predicates +
  • + 8. + Privacy and Security Considerations +
      +
    1. + 8.1 + Impact of not enforcing Protected Properties +
      2. +
    +
  • A. Changelog
    • @@ -1295,6 +1309,24 @@

    7. Other predicates +
    +

    8. Privacy and Security Considerations

    +
    +

    This section is non-normative.

    + +
    +

    8.1 Impact of not enforcing Protected Properties

    +
    +

    The Protected Properties requirement is intended to prevent agents other than the WebID owner from modifying specific properties, notably solid:oidcIssuer. When a Solid server does not enforce these protections, the WebID Profile is open to attack:

    +
      +
    • An agent with write access to the WebID Document can rewrite solid:oidcIssuer, redirecting Solid-OIDC authentication to an attacker-controlled OpenID Provider and impersonating the WebID owner.
      • +
    • Other Protected Properties may be similarly tampered with by an agent granted write access, depending on which properties a particular server fails to protect.
      • +
    +
    +
    +
    +
    +

    A. Changelog