GoogleChrome/private-tokens

Private State Token Issuer Request - HeatToken

Opened this issue · 3 comments

Issuer Name

HeatToken

Origin

https://token.hc.lc

Contact Email

m@hc.lc

Key Commitment Endpoint URL

https://token.hc.lc/key-commitment

Purpose

Offering credential management and private state tokens as a service

Disclosure and Acknowledgement

  1. I understand the technical restrictions on key rotation frequency of 60 days in the PST API.
  2. I understand that my issuer registration will be valid for a period of six months after the key commitment is accepted, and that I will need to re-register in this repository following that six-month period.
  3. I understand that in the future renewing my registration for this API may have additional requirements, to reduce the risk of abuse by token issuers.

It appears like your current keys will expire in less than two months and since rotation is only allowed every 60 days, you won't be able to issue tokens between November 10th and 20th?

Let us know if this is intentional, otherwise you may want to set the expiration further out from when you actually intend to rotate to new keys.

It appears like your current keys will expire in less than two months and since rotation is only allowed every 60 days, you won't be able to issue tokens between November 10th and 20th?

Let us know if this is intentional, otherwise you may want to set the expiration further out from when you actually intend to rotate to new keys.

thanks for catching that! the keys have been updated

It also looks like you're using an outdated library, you should be generating PrivateStateTokenV1VOPRF keys, rather than TrustTokenV3VOPRF.