Status list

How status lists let issuers signal attestation revocation or suspension in the EUDI Wallet, without tracking who checks a credential's status.

A status list is how issuers of digital credentials - such as verifiable credentials issued via the EUDI Wallet - communicate whether an attestation is still valid or has been suspended. Instead of answering per-credential queries (which would reveal where a credential is used), the issuer publishes a compact, signed list - often a bitstring where each credential has a fixed position - that relying parties fetch and check locally.

This design limits what the issuer can learn: it may still see who fetches the list and when, but not which specific credential within it is being checked, and privacy improves as more credentials share the same list. It is the attestation counterpart of what CRL/OCSP do for certificates. Formats such as the IETF Token Status List - still a draft specification, used via ARF/HAIP profiling - and the W3C Bitstring Status List are used in the EUDI Wallet context.