W3C Just Dropped a Game-Changing Update to Verifiable Credentials Status Lists - You Won't Believe What's New!

• Added a new 'refresh' status purpose that signals when updated verifiable credentials are available via refresh services
• Clarified that the 'ttl' (time-to-live) property doesn't override or replace the validity period of the status list
• Enhanced privacy protections with improved documentation on random indexing and group anonymity features
• Strengthened security considerations around bitstring encoding to prevent misinterpretation of credential status
• Expanded examples showing multiple status lists and entries in single credentials for better implementation guidance

The Bitstring Status List specification provides an efficient, privacy-preserving method for checking the status of Verifiable Credentials (like revocation or suspension). Instead of individual status checks, it uses compressed bitstrings where each bit represents one credential's status. The system works through three components: Status List Credentials containing compressed bitstrings, Status List Entries in user credentials that point to specific bits, and a verification process that checks the bit value. This approach is highly space-efficient (compressing to just a few hundred bytes for thousands of credentials), supports privacy through group anonymity and certificate stapling, and enables high-performance verification through caching and CDN support.