15:12:38 RRSAgent has joined #vcwg 15:12:38 logging to http://www.w3.org/2017/08/29-vcwg-irc 15:12:46 Q+ 15:13:07 Agenda: https://lists.w3.org/Archives/Public/public-vc-wg/2017Aug/0014.html 15:13:12 scribe: manu 15:13:29 Topic: Reintroductions 15:13:34 dchadwick: I'm an invited expert; I've been building VCs. I started over a year ago. a coiple of pilot applications the last one was the ??? ; we signed medical patients up using a mobile app; they were using VCs to sign up, get prescriptions, etc. and they found it easier than traditional methods. They said they loved it because they didn't have to use usernames and password and wished it would be offered officially 15:13:47 Topic: Status of Web Commerce IG 15:13:51 not being minuted, member only 15:13:55 ack ChristoperA 15:13:57 scribe: amigus 15:14:15 present+ Nathan_George 15:14:22 present+ Chris_Webber 15:14:29 present+ David_Lehn 15:14:39 present+ David_Lehn 15:14:43 present+ Matt_Stone 15:14:46 present+ Gregg_Kellogg 15:14:53 present+ Adam_Migus 15:15:09 present+ Dave_Longley 15:15:14 present+ Manu_Sporny 15:15:22 present+ David_Chadwick 15:15:26 present+ Christopher_Allen 15:15:27 present+ David_Ezell 15:15:29 rrsagent, make logs public 15:15:34 rrsagent, make minutes 15:15:34 I have made the request to generate http://www.w3.org/2017/08/29-vcwg-minutes.html manu 15:15:39 present+ Christopher_Allen 15:16:01 Meeting: Verifiable Claims Working Group 15:16:21 rrsagent, make minutes 15:16:21 I have made the request to generate http://www.w3.org/2017/08/29-vcwg-minutes.html manu 15:16:47 q? 15:16:49 Chair: Richard_Varn, Matt_Stone, Dan_Burnett 15:16:57 ack ChristopherA 15:16:58 rrsagent, make minutes 15:16:58 I have made the request to generate http://www.w3.org/2017/08/29-vcwg-minutes.html manu 15:17:06 present+ Chris_Webber 15:17:14 rrsagent, make minutes 15:17:14 I have made the request to generate http://www.w3.org/2017/08/29-vcwg-minutes.html manu 15:17:53 Topic: Data Model Spec 15:17:58 https://w3c.github.io/vc-data-model/ 15:18:23 https://github.com/w3c/vc-data-model/pull/69 15:18:31 varn: PR69: we are sent requests for comments; looks like 2 of 4 are processed; manu is is done? 15:18:50 manu: yes, it's gtg and there are no pending PRs 15:19:07 ... so there is no active work going on the spec which is not ideal 15:19:22 varn: we're focusing on PR69; it's in? 15:19:26 manu: yes, it's in 15:20:08 Here's the milestone: https://github.com/w3c/vc-data-model/issues?q=is%3Aopen+is%3Aissue+milestone%3A%22VCM1%3A+Basic+Issuer%2C+Claim%2C+and+Signature%22 15:20:31 varn: our first major milestone were to complete the documents as they relate to issuer and verify; so is there anyone here who wants to work on it? is it alreayd done? 15:20:35 q+ we are not done, not even close, test suite - issue discussion. 15:20:46 q+ to say we are not done, not even close, test suite - issue discussion. 15:20:53 burn: is it done already and if not please speak up to say it's not done and what you want to do 15:21:20 dchadwick: working on the security review; its WIP. the first version will likely have a set of limitations on it 15:21:24 q? 15:21:26 q+ Joe 15:21:27 q- later 15:21:37 ack Joe 15:21:40 q+ we are not done (cross matching issues, privacy issues, variants on signature scheme questions -- how many of these are called out as issues for later) 15:21:40 jandrieu: two things: 15:21:54 q? 15:21:55 ... what's in the milestone 15:21:56 q+ nage to say we are not done (cross matching issues, privacy issues, variants on signature scheme questions -- how many of these are called out as issues for later) 15:22:16 milestone is "basic issue and verify" 15:22:17 ... I'm offline and can't see it myself 15:22:27 ack manu 15:22:27 manu, you wanted to say we are not done, not even close, test suite - issue discussion. 15:22:36 manu: we're not done with this milestone we haven't completed a single of the 4 issues 15:22:55 ... assumption is that the issues will be discussed offline but I don't see any of that 15:23:04 ... other option is disucssion in meeting but that hasn't happened 15:23:30 ... also, it has to survive a basic test from the testsuite which is still WIP 15:23:31 q? 15:23:41 ... as such we're weeks away from being able to closeout the milestone 15:23:57 ack nage 15:23:57 nage, you wanted to say we are not done (cross matching issues, privacy issues, variants on signature scheme questions -- how many of these are called out as issues for later) 15:24:05 ... we're not getting enough volunteers to work on it which is slowing us down 15:24:36 nage: question: we have a bunch of issues with cross-matching, combining and privacy; are they in scope? 15:25:06 ... what about various in the different schemes like json vs. json-ld and if we see issues related to the them when do we bring it up? 15:25:09 q? 15:25:15 let's stick with a "minimum viable milestone" ... i vote to defer matching issues and privacy for another milestone 15:25:25 q+ to note that it's all up to Evernym/Sovrin Foundation to bring these issues up and when... I suggest /after/ M1. 15:25:33 ack manu 15:25:33 manu, you wanted to note that it's all up to Evernym/Sovrin Foundation to bring these issues up and when... I suggest /after/ M1. 15:25:40 varn: is it advisable to set a date or should we just list the workitems and make progress 15:26:21 manu: setting a date and working backwards doesn't really work; chris and I are working on it but the primary blockers are lack of discussion of those 4 issues and tests in the testsuite 15:26:30 needs: 1. discussion on issues, 2. spec text to resolve them, 3. tests for them in the test suite. 15:26:33 ... so specify the work that needs to be done and find folks to do it. 15:26:35 https://github.com/w3c/vc-data-model/issues?q=is%3Aopen+is%3Aissue+milestone%3A%22VCM1%3A+Basic+Issuer%2C+Claim%2C+and+Signature%22 15:27:00 q+ to answer nage 15:27:01 varn: (listed the 4 issues) 15:27:35 varn: the one with the most comments is the model mapping one; second most is ???; either way, is there one that's easier to work on? 15:27:40 https://github.com/w3c/vc-data-model/issues/33 15:27:50 manu: 33 is the easiest 15:27:55 q? 15:27:57 manu: and then 66 15:28:06 ack manu 15:28:06 manu, you wanted to answer nage 15:28:07 varn: OK, 33 and 66 should be worked on first 15:28:39 manu: nage: the issues you mentioned are important but it's up to Sovrin/Everynm to push for the issues that matter to you guys. 15:29:02 manu: so if you want something to get worked on sooner then lets get it on the list for milestone too 15:29:23 manu: other issues have prerequites and so are dependent 15:29:48 nage: just wondering if we should raise PRs now or wait until the discussions are more timely related to other work 15:30:09 manu: raise the issues early so everyone sees what's important and gets people thinking 15:30:14 ... does that answer? 15:30:33 nage: well it doesn't make prioritization clear but we can action on it 15:30:38 ack dan who is only on phone 15:30:59 varn: you can also raise the issues even if it's too soon to be specific just so that we can assign them to milestone 2 or even 1 15:31:03 dan is dan burnett 15:31:07 oops 15:31:12 s/varn/burn/ 15:31:20 s/dan is dan burnett// 15:31:24 s/oops// 15:31:30 ack joe andrieu who is also only on phone 15:31:34 https://github.com/w3c/vc-data-model/issues/68 15:31:40 q? 15:31:45 s/ack joe andrieu who is also only on phone// 15:32:13 jandrieu: not sure whether issue 68 is for milestone 1 or 2 but we should issuer vs. holder 15:32:34 ... the whole question is not part of our conversation yet and I wonder when it should be part of the it 15:33:06 s/ack david chadwick who is only on the phone// 15:33:10 dchadwick: reponse to jandrieu: we need for milestone 1, to articulate the limitations on holder vs. subject. 15:33:22 ... so we may say the holder is the subject period. 15:33:38 Q+ 15:34:16 jandrieu: so there's some clarification needed as to whats in scope. to my view there's VC for which the subject isn't the holder but ther different assumptions are a hinderance to consensus 15:34:38 dchadwick: most of the stuff implicity says the subject is the holder so we should be explicit 15:34:39 q+ to note that this is a protocol discussion, so probably belongs in CG and then we feed that discussion back into the WG... 15:35:00 jandrieu: then we have to assure how/why the holder is the subject 15:35:29 varn: then issue 68 may need to be worked on to get to the bottom of this 15:35:47 ... and either there or elsewhere we need to unpack this issue and state the assumptions that were made 15:36:01 q+ to request that we move issue 68 to M2... because we do need to deal w/ it, but it's not a part of a minimum viable spec. 15:36:12 varn: also the question is whether there's assurance of the subject being the holder 15:36:31 jandrieu: i think that sounds right to me and issue 68 captures most of that 15:37:02 i think that M1 does not need to deal with authenticating the presenter of a profile, just authenticating the information within the profile 15:37:06 ack ChristopherA 15:37:12 varn: dan, matt and I will take this offline to figure out how to get this into the agenda/discussion 15:37:13 The identity assurance seems like a schema-specific issues, not sure if it could acutally be addressed globally (without adding a lot of baggage to the data model) 15:37:15 q? 15:37:25 profile/credential 15:37:35 q? 15:38:02 ChristopherA: I'm fine with moving this to milestone 2 but it should be explicit assumption that subject = holder but also very explicit that we're exploring cases where they aren't, that may make it into milestone 2 15:38:14 ack manu 15:38:14 manu, you wanted to note that this is a protocol discussion, so probably belongs in CG and then we feed that discussion back into the WG... and to request that we move issue 68 to 15:38:17 ... M2... because we do need to deal w/ it, but it's not a part of a minimum viable spec. 15:38:22 ... it should be stated in 1 so there are no surprises in m2 15:39:27 manu: part of jandrieu's point is important but not sure all of it is under the WG vs. the CG because of the charter so probably should have it in the CG then have the result feedback into the WG; thus put issue 68 on M2 15:39:46 manu: lets not hold up milestone one while the CG resolves the issue 15:40:14 manu: so put issue 68 in M2 and let the CG disucss it in the meantime 15:40:36 varn: do we need to explicitly state the holder != subject exploration, in M1? 15:40:45 manu: no harm and i think we should 15:40:58 varn: is there a volunteer to document that in M1? 15:41:11 david chadwick volunteers 15:41:33 varn: dchadwick volunteers; anyone else? 15:41:46 ACTION: DavidChadwick and JoeAndrieu to write up issue marker for issue 68 for VC Data Model spec. 15:41:48 jandrieu: i will help work on it too by extending what's there 15:41:52 rrsagent, make minutes 15:41:52 I have made the request to generate http://www.w3.org/2017/08/29-vcwg-minutes.html manu 15:42:00 varn: volunteers assigned 15:42:08 q+ to note advances in test suite 15:42:28 q? 15:42:29 ack manu 15:42:30 manu, you wanted to note advances in test suite 15:42:34 https://github.com/msporny/vc-test-suite 15:42:44 https://github.com/msporny/vc-test-suite/tree/gh-pages/bin 15:43:22 manu: I committed some new changes to the testsuite; either way it needs to be migrated to the w3c repo; Liam? where is that? 15:43:24 liam what is the status of the test suite 15:43:47 Liam: I think it's in your court now because you have to get the repository to me 15:44:05 manu: permission was granted to you so you just need to transfer it. Here's a link to how to do that: 15:44:09 liam needs to do a transfer at bottom of this page: https://github.com/msporny/vc-test-suite/settings 15:44:35 Liam: last time i checked there was no transfer button; we'll try again 15:44:38 q? 15:44:44 q+ 15:44:48 varn: Liam and manu should work on it offline 15:44:53 maru: agreed 15:44:58 ack gkellogg 15:45:23 gkellogg: question: is this test manifest based on any existing one? 15:45:52 manu: no, it's not based on any previous suite; we haven't decided what it will look like yet just how the driver works and how a developer would develop against it 15:46:05 ... no decisions have been made so please help us! 15:46:30 gkelllogg: there's some advantage to stick with what was done in the JSON-LD one but we can take it offline 15:46:54 agenda item 2.3 15:47:20 varn: for those who did the reviewing: anything to report? findings or suggestions either here or did you put something elsewhere? 15:47:33 varn: anything wrong? left out? any changes needed? 15:47:42 varn: we have 10 minutes or so to cover it.. 15:47:51 q+ 15:47:59 ack MattLarson 15:48:59 MattLarson: Not my area of expertise but as an implementor: one of the things is storage providers and privacy as it relates to them. what's the groups feeling about storing the cred vs. generating it on demand? 15:49:24 ... there seems to be an assumption that it's static hence the question; what does the group think? 15:49:34 ... what about revocations lists 15:49:41 q? 15:49:47 ... everything else seemed reasonable to me. 15:50:20 ... one more thing: a lot of credentials in the badging space use email but that's correlatable. thoughts? 15:51:05 q+ 15:51:08 q+ 15:51:16 q? 15:51:19 varn: good questions; my observation: the assumption that we're making is that a bundle is encrypted and passed around which would imply static vs. you're the only person who can generate it which seems at odds 15:51:59 +1 Acclaim represents the governing body of the credential - becomes a delegated issuer. 15:52:18 ack dlongley 15:52:19 TallTed: note that email address can be problematic as agent identifier -- e.g., role addresses often lead to multiple people, both simultaneously and over time 15:52:23 mattLarson: the idea is that a user creates a claim which can then be distributed but it's not actually stored with us; only a memento that can be used to reference it 15:52:39 q? 15:54:11 dlongley: the data model has no restrictions that would preclude any of the behavior we're talking about but it sounds like you're talking about an issuer who creates a claim then takes it somewhere. just listening it sounds like it fits in cleanly. issuer can issue claims using the data model then the generated claim/credential which is then stored in a repo which can then be used elsewhere. the claim can be signed in different ways so as to make it fit for 15:54:11 different uses 15:54:17 ack stonematt 15:54:41 q+ to speak about identifiers (as part of protocols) and revocation 15:55:48 q+ 15:56:14 ack nage 15:56:14 nage, you wanted to speak about identifiers (as part of protocols) and revocation 15:56:24 stonematt: echoing what dlongley said; having a claim works that way is fine; if someone wants to assemble various credentials and put them together as a portfolio which then itself becomes a claim that the platform issues. it's a new example of agency and delgation in which the acclaim is working on behalf of the issuer 15:56:34 Acclaim has been empowered to act as the "Issuer" and it fits nicely in the architecture this group has produced 15:57:07 q- my question was answered 15:57:09 (I have to leave to prepare for CG meeting) 15:57:21 nage: when we get into protocol in the CG it's important to be specific about this stuff but here we've making no assumptions so this is a CG issue right now but one that needs to be handled carefully WRT privacy 15:57:33 [vc-test-suite transfer in progress... done... now https://github.com/w3c/vc-test-suite ] 15:57:42 ack MattLarson 15:57:46 ... that said, some of this will have to be represented in the data model and/or will influence it 15:58:10 MatlLarson: my question was answered 15:58:38 varn: we need for folks reviewing the security and privacy section get that done so it'll be on the agenda next week. 15:58:46 identifier management and correlation is especially important to revocation design (revocation lists reveal too much information for many use cases) 15:59:04 rrsagent, make minutes 15:59:04 I have made the request to generate http://www.w3.org/2017/08/29-vcwg-minutes.html manu 16:00:10 manu thanks for getting the minutes created! 16:10:57 amigus_ has joined #vcwg 18:10:28 Zakim has left #vcwg 18:59:38 liam has joined #vcwg 21:07:08 gkellogg has joined #vcwg 22:38:45 gkellogg has joined #vcwg 23:55:02 gkellogg has joined #vcwg