15:01:26 RRSAgent has joined #did 15:01:26 logging to https://www.w3.org/2020/07/21-did-irc 15:01:26 present+ 15:01:28 dmitriz has joined #did 15:01:29 Zakim has joined #did 15:01:32 present+ 15:01:37 Zakim, start meeting 15:01:38 RRSAgent, make logs Public 15:01:38 please title this meeting ("meeting: ..."), rhiaro 15:01:42 Meeting: DID WG 15:01:42 present+ 15:01:46 present+ 15:01:53 present+ 15:01:59 present+ 15:02:00 present+ 15:02:06 present+ 15:02:22 Orie has joined #did 15:02:36 present+ 15:02:57 present+ 15:03:51 scribe+ 15:03:56 present+ 15:04:13 Topic: Agenda Review 15:04:35 brent: agenda, metadata, core issue status check... 15:04:58 Topic: Introductions 15:05:19 drummond has joined #did 15:05:30 present+ 15:05:41 Welcome James! 15:05:48 james: I'm james qu, working on DID an china < sorry... missed that> 15:06:18 JoeAndrieu has joined #did 15:06:27 dlongley: Im with digital bazaar, we work on DIDs, VCs and blockchain... been working on standards for over a decade 15:06:42 brent: next topic call is later today 6PM ET 15:06:42 present+ 15:06:51 ... topic is JWK and key formats 15:06:54 present+ 15:07:20 brent: any questionss? 15:08:00 manu: question for justin_r, we had a meta data discussion during the special topic call... there seems to be support for PR #347 15:08:05 This is the metadata PR: https://github.com/w3c/did-core/pull/347 15:08:20 jonathan_holt has joined #did 15:08:34 present+ jonathan_holt 15:08:42 ... we were able to discuss your PR as well. 347 attempt to strike a compromise between the language in your PR and the other PR, primarily around the type of meta data (strings vs infra) 15:09:00 q+ 15:09:06 ... we are still stuck on a comment about the right hand side, whether it should be strings or must be sstrins. 15:09:29 ... we need justin_r to engauge selfissued, and find a resolution on that 15:09:37 ... can we get a general review of 347 15:09:43 ack justin_r 15:10:28 justin_r: sorry, just seeing this... I agree the language is problematic.... avoiding details, i will try to take a look at this soon.... 15:10:54 ... wondering about infra values, and strings... need clarity on infra values. 15:11:18 manu: sounds good, you may also want to review the call notes from last week. 15:11:28 brent: please review PR 347 15:11:38 dezell has joined #did 15:11:39 Announcement: @ 1PM ET today, UMA Health Info Interop + User Control Webinar https://kantarainitiative.org/events/?event_id1=10763 15:11:40 ...moving on to core issue status check 15:11:44 present+ 15:11:54 https://github.com/w3c/did-core/issues?q=is%3Aopen+sort%3Aupdated-asc+-label%3Aeditorial+-label%3Adiscuss+-label%3Aneeds-special-call+-label%3A%22horizontal+review%22+-label%3Ametadata+-label%3Akeys 15:12:11 brent: we have tried to strip out things we already know we need deeper discussion on 15:12:21 ... her we go! 15:12:30 brent: issue #198 15:12:31 https://github.com/w3c/did-core/issues/198 15:12:52 selfissued has joined #did 15:12:53 ... assigned to markus, not on the call today... phil, justin, other.. 15:13:02 ... can anyone give an update? 15:13:17 present+ 15:13:36 ... markus's last comment appears to be the current state. 15:13:41 Non-official minutes from metadata special topic call are here -- https://www.w3.org/2020/07/16-did-topic-minutes.html 15:13:42 https://github.com/w3c/did-core/issues/202 15:13:48 brent: next issue 15:13:51 q+ 15:13:52 Kristina has joined #did 15:14:02 identity_woman has joined #did 15:14:35 justin_r: i've read through this section... the text that is in there says the context .... stuff is defined in the did registry 15:14:45 ... seems like the language needs to be cleaned up 15:15:06 ... need help writing the JSON-LD context language update 15:15:26 brent: anyone on the call willing to help? 15:15:27 off topic but relevant to the life and health of the community - I'm working on collecting more well wishes for John Jordan this week - here is the Miro card - https://miro.com/app/board/o9J_kp34wZs=/ 15:15:46 brent: hopefully dave is ok with being assigned by manu 15:15:55 justin_r: 621 and 622 15:16:12 justin_r: need to account for production / consumption language 15:16:20 ack justin_r 15:16:33 brent: next issue 15:16:41 https://github.com/w3c/did-core/issues/249 15:16:48 ... how to mitigage trust issues with the universal resolver 15:17:04 ... again markus is not currently on the call 15:17:15 ... can anyone comment on the status? 15:17:29 scribe+ 15:17:35 Orie: Without looking at the issue, I recall, maybe this belongs in implementation guide? 15:17:46 Orie: out of scope for did core spec, more of implementation guide issue 15:17:48 scribe+ 15:17:51 Orie: I recall this perhaps fitting better into the implementation guide 15:17:56 Orie: I'm in favor of closing or moving to implementation guide. 15:18:05 ... I am in favor of moving this to the implementation guide 15:18:12 q+ 15:18:33 ... there are some general privacy considerations around this topic that should be added. 15:18:40 ack drummond 15:18:55 drummond: i agree with orie... i think its a security consideration not a privacy consideration 15:19:05 ... the balance of the discussion belongs in the implementation guide 15:19:13 ... adding a comment 15:19:28 brent: please leave comments 15:19:34 ... next PR 15:19:38 https://github.com/w3c/did-core/issues/333 15:20:00 ... did syntax, assigned to markus... 15:20:17 ... can anyone provide an update? drummond? 15:21:11 Jamesqu has joined #DID 15:21:13 drummond: PR exists... this is waiting... related to an ABNF update.... 15:21:22 brent: PR referenced as been merged 15:21:28 drummond: we can close 15:21:37 brent: lets do a 7 day close 15:21:55 ... next issue 15:22:03 https://github.com/w3c/did-core/issues/185 15:22:18 brent: assigned to tobias, not on the call today 15:22:31 manu: we will cover this on the special topic call today 15:22:39 brent: skipping! 15:22:44 https://github.com/w3c/did-core/issues/337 15:22:55 ... when you did params be dropped 15:23:27 Orie: this is an interesting issue. it is that DID parameters are appended to DIDs by parameters that seek to change the DID document 15:24:05 ... the conclusion, that needs to be noted on the issue, the did document that is returned should have an id that is the DID, not the DID with the parameters. 15:24:16 ... the parameters belong in the resolution metadata. 15:24:22 +1 to Orie 15:24:24 ... we need to add better language around that 15:24:30 +1 to adding better language around that 15:24:45 brent: does anyone want to volunteer to add better language 15:24:55 if its assigned to me, i can try 15:25:21 brent: i will add a comment, about next steps 15:25:43 ... next isue 15:25:50 s/if its assigned/Orie: if its assigned/ 15:25:59 https://github.com/w3c/did-core/issues/339 15:26:03 CBOR issue is solid, and should not be marked at rissk 15:26:11 q+ 15:27:19 jonathan: tthe issu is with the registries 15:27:48 ... need to update the section to include better COSE / CBOR versions issue 15:27:55 ... hard to get a 1:1 mapping 15:28:05 ... will be a process of describing a vocabulary 15:28:22 ... CBOR tags are their own regstry... 15:28:30 ... hard to get interop... 15:28:39 ack Orie 15:28:45 https://github.com/transmute-industries/did-core/tree/master/packages/data-model 15:28:50 https://github.com/transmute-industries/decentralized-cbor/blob/master/src/__fixtures__/outputs/table.csv 15:28:51 Orie: I wanted to share some work I did with CBOR 15:29:10 ... I made a package that transforms between CBOR JSON JSON-LD, etc. 15:29:23 ... CBOR is complicated and thetre is a lot of work to be done. 15:29:43 ... especially with the registries, we don't want to duplicate work done elsewhere. 15:30:00 jonathan: thanks, CBOR is stable and well represented... but its gonna take some work... 15:30:10 brent: next issue 15:30:18 https://github.com/w3c/did-core/issues/340 15:30:19 ... add COSE example into CBOR section 15:30:30 jonathan: related to the previous 15:30:53 ... raw CBOR will support COSE, DAG CBOR supports 15:31:02 brent: add comments to issue 15:31:14 https://github.com/w3c/did-core/pull/253 15:31:24 ^ thats not an issue 15:31:38 brent: forget that... moving on to 341 15:31:45 https://github.com/w3c/did-core/issues/341 15:31:54 ... getting iana registration for additional cbor tags 15:32:01 q+ 15:32:07 ack Orie 15:32:15 q+ 15:32:31 Orie: there's a couple of things here. I'm not sure if we're the people who ask IANA to register CBOR tags. 15:32:45 ... but if we want to do that, we need to record them all on the issue 15:32:54 q+ 15:33:05 ... we also need to think about what the JSON representation of the CBOR property is and reserve those. 15:33:18 I'm registering CBOR tags now in https://tools.ietf.org/html/draft-ietf-cbor-date-tag-05 15:33:21 ... similar to what was doen in WebAuthn. 15:33:25 I'll add a comment to the issue 15:33:39 brent: selfissued is registering tags now 15:33:57 ack jonathan_holt 15:34:03 selfissued: as long as the tags make sense, the CBOR WG can do it. 15:34:40 q+ to note concern around registering TONS of tags. 15:34:45 jonathan: we need to iterate and find out which tags we need... if the mimetype is did+cbor... we need to reuse the existing registry... problem solved 15:34:48 ack selfissued 15:34:54 ack manu 15:34:54 manu, you wanted to note concern around registering TONS of tags. 15:35:13 manu: i will put this in the issue... i have great concern about registering LOTs of tags.... 15:35:32 ... this group could easily flood all the remaining CBOR tag values... that would be a big problem. 15:35:34 q+ 15:35:43 ack selfissued 15:35:47 ... there are other community considerations... 15:36:41 We have a registry that could be construed as a specification, and we are a WG... we could ask for small tags 15:37:00 selfissued: to manu's point... you want to use common sense, given the small tag is a limited resource... we should not consume those small tags without a really good reason.... where a good reason is lots of applications plan to use 15:37:02 and that would be an abuse of our position as a WG, IMHO. Agree with statements from Mike. 15:37:06 brent: next up... 15:37:31 privacy considerations for service endpoints... 15:37:32 https://github.com/w3c/did-core/issues/324 15:38:13 adrian: basically 2 things on this... 1 is proposal from jonathan, wayne myself... as to how to answer the privacy questions... thats relevenat 15:38:27 @manu - should we add a github issue tag for "security considerations" and "privacy considerations" so we can mark issues that need to be covered in those sections? 15:38:52 ... 2nd a group of us involved in the glossery project, has a list of 5 types which we might want to define for service endpoints.... we'll share that work soon 15:39:00 q+ 15:39:08 ... 2 things ready for consideration by the group 15:39:17 kaliya: lets get the link into chat 15:39:23 ack drummond 15:40:14 drummond: i suggest we add labels for the sections ... sounds like we have a lot of questions to address... we want to have short descriptions in those sections, and then link to implementation guide. 15:40:23 ...and potentially other documents 15:40:39 Service endpoint type survey: https://docs.google.com/forms/d/e/1FAIpQLSc8Z8FklORke1iPRoyo90GNWqqXkmdbgQLNvHvU-v4XvLxO0A/viewform?usp=sf_link 15:40:56 drummond, yes, we should totally have that, I'll add the tags now. 15:40:57 brent: apologies to wayne, jonathan and adrian, we will try and get it into the agenda next week 15:41:04 ... next issue 15:41:10 @manu, thanks 15:41:10 https://github.com/w3c/did-core/issues/266 15:41:18 shoudl DID support self signed certificates 15:41:30 ... assigned to manu 15:41:42 manu: we... 15:42:01 ... selfissued: jwks have fingerprints? 15:42:14 ... if we are doing JWK.... its defined? 15:42:30 selfissued: there is an RFC which defines how to compute a thumbprint 15:42:41 ... not typrically put in a JWK... 15:42:51 brent: please add comments to issue 15:43:05 https://github.com/w3c/did-core/issues/208 15:43:08 ... ietf did+ld+json media type registration... 15:43:28 manu: discussion continues... moving slowly 15:43:51 ... if we don't get a resolution from IANA.. we have options 15:43:58 brent: please get that comment onto the issue 15:44:06 https://github.com/w3c/did-core/issues/328 15:44:12 ... update data model parts of the spec to refer to infra 15:44:25 ... there is a PR that does this #347 15:44:32 ... review it! 15:44:45 brent, that's what I was gonna say, thanks 15:45:00 brent: next issue 15:45:06 https://github.com/w3c/did-core/issues/122 15:45:12 brent, also just updated it, I'll make a new PR for this too 15:45:15 ... when is a did subject not a did controller, if ever? 15:45:20 ... lots of conversation 15:45:31 ... amy says she will try a PR 15:45:36 q+ 15:45:55 ... highly recommend people read this issue, lots of value in the comments. 15:46:03 ack drummond 15:46:36 drummond: we will need to reference the appendix... we may need a second appendix for controller 15:46:45 ... I will add a note. 15:46:56 brent: next issue 15:46:59 https://github.com/w3c/did-core/issues/332 15:47:11 ... 332 rename master branch... assigned to me. 15:47:26 brent: status is this is blocked by github.io 15:47:36 ... we are awaiting tooling from github 15:47:54 ... status is no change 15:48:10 https://github.com/w3c/did-core/issues/344 15:48:15 brent: 334 impossible did url abnf using eager evaluation... 15:49:05 wayne: the issue here is we are more ambitious than URI spec is with token parsing... survey of web servers, seems like we are seeing differences between servers / tokens.... 15:49:35 ... back tracking parser needed... now in academic world of parsers... i recommend some changes that would work without backtracking 15:49:45 q+ 15:49:53 ack jonathan_holt 15:50:15 jonathan: the CCDL may also be overlapping of ABNF rules... not sure of the differences... anyone know? 15:50:22 brent: ask on the issue 15:50:39 https://github.com/w3c/did-core/issues/349 15:50:50 brent: 349 add relativeRef did URL parameters 15:50:59 q+ 15:51:05 ack Orie 15:51:35 Orie: I think we have the service section registered in the registries, but not the relativeRef, so we need to register it there. 15:51:48 ... this was formerly done with matrix params 15:51:50 q+ 15:51:55 ack manu 15:52:06 Jamesqu has joined #DID 15:52:15 manu: we also need to specify how that works in did core as well 15:52:28 https://github.com/w3c/did-core/issues/248 15:52:30 brent: 248 need term for Relying Party 15:52:34 ... joe? 15:52:53 joeandrieu: there is a PR for thiss 15:52:58 brent: checkout PR 350 15:53:24 https://github.com/w3c/did-core/issues/353 15:53:31 brent: 353 confusing example in section 3.2.1 ... did params are URI query strings 15:53:40 ... this issue is 5 hours old 15:54:07 ... looks like spec language needs to be cleaned 15:54:17 ... moving on... 15:54:32 https://github.com/w3c/did-core/issues/198 15:54:37 brent: 198 raised by markus, we talked about this already! 15:54:53 ... not update, we have gone around the horn... 15:55:28 ... we have covered the whole list... to me this means... we now need your PRs 15:55:40 ... we need those changes, we need those submissions 15:55:46 ... please get your PRs in 15:56:04 ... the less call time we spend on issues moving forward, the more time we spend on special topics 15:56:09 ... any additional comments? 15:56:18 q+ 15:56:20 q+ 15:56:31 https://github.com/w3c/did-core/issues/205 15:56:33 ack jonathan_holt 15:56:50 jonathan: i recall that service endpoints were going to be moved 15:56:53 q+ 15:56:58 ack wayne 15:57:18 wayne: we sent out secuirty questionaire initial responses 15:57:45 ... lots of the questions depend on which did methods and the use of service endpoints... 15:57:58 ... DNA goes to the mooon?... ? 15:58:12 brent: please give feedback on that survey 15:58:15 ack Orie 15:59:02 Orie: trying to answer jonathan. the definition of what the services section is, is in the did spec registries, but services as a category of things is still in the did core spec, and is intended to still be there. 15:59:16 ... and there are are numerous security issues with that. 15:59:49 brent: thats the meeting, thanks to people who helped get through issues, promised PRs and submitted PRs 16:00:01 ... don't forget our special topic call is in 6 hours 16:00:43 By all! 16:10:08 gannan has joined #did 18:00:50 Zakim has left #did 19:59:05 chriswin_ has joined #did 20:47:03 Aaron has joined #did 20:51:11 I wanted to listen in on the chat today but the zoom link seems to be shared only with current members 20:53:25 Meeting link for Zoom in archive: https://lists.w3.org/Archives/Member/member-did-wg/2020Jun/0000.html 22:02:19 kdenhartog has joined #did 22:02:23 kdenhartog has left #did 22:19:20 dbuc has joined #did 22:20:08 q+ 23:04:09 it this irc active 23:04:16 is