vc be a W3C Verifiable Credential Standard compliant verifiable credential. If I print it out on paper and loose it on the subway, can an attacker pick up the paper, type in the information into a
JSON file, upload it to his wallet and
- impersonate me?
- learn the VC claims, i.e. name, date of birth (and whatever other claims are in the VC)?
If the attacker wanted to do that, what would he need to do? As I understand it, the
subject is represented as a decentralized identifier document (
did) which somehow needs to be resolved to my real-world name.