23:05:20 <RRSAgent> RRSAgent has joined #did-topic
23:05:20 <RRSAgent> logging to https://www.w3.org/2020/12/08-did-topic-irc
23:05:22 <Zakim> Zakim has joined #did-topic
23:05:27 <manu> rrsagent, make logs public
23:05:52 <manu> present: kdenhartog, shigeya, markus_sabadello, agropper
23:06:49 <JoeAndrieu_> JoeAndrieu_ has joined #did-topic
23:06:56 <manu> scribe: JoeAndrieu_
23:07:01 <drummond> drummond has joined #did-topic
23:07:03 <drummond> present+
23:07:11 <JoeAndrieu_> JoeAndrieu_ has left #did-topic
23:07:16 <by_caballero> by_caballero has joined #did-topic
23:07:24 <agropper> https://docs.google.com/document/d/13qLCZcks3OAb2V7GHcrSs8s9drA5OaqEPYPI1knmodc/edit#
23:07:28 <JoeAndrieu__> JoeAndrieu__ has joined #did-topic
23:07:35 <by_caballero> Present+
23:07:41 <JoeAndrieu__> present+
23:07:42 <manu> Meeting: DID Special Topic Meeting
23:07:44 <JoeAndrieu__> scribe+
23:08:57 <Orie> Orie has joined #did-topic
23:09:01 <Orie> present+
23:09:23 <JoeAndrieu__> drummond: re: note at the beginning.
23:09:32 <JoeAndrieu__> ... I'll work on it now and we can come back
23:09:42 <JoeAndrieu__> agropper: Tom Jone's comment
23:10:45 <JoeAndrieu__> joeandrieu: agreed. non-correlatable identifiers are not a thing
23:11:14 <JoeAndrieu__> manu: can we just strike?
23:11:20 <JoeAndrieu__> consensus: yep
23:11:30 <JoeAndrieu__> agropper: next
23:12:26 <JoeAndrieu__> joeandrieu: I don't understand how the comment relates to the highlighted section of text
23:13:02 <identitywoman_> identitywoman_ has joined #did-topic
23:13:06 <identitywoman_> present+
23:13:16 <identitywoman_> hi sorry I was a bit late.
23:13:20 <JoeAndrieu__> ... I see, if we can keep the PII out, we can minimize the lawyers
23:14:06 <JoeAndrieu__> agropper: next
23:15:26 <JoeAndrieu__> shigeya: based on Orie's comment, we can remove my question.
23:15:45 <JoeAndrieu__> Orie: perhaps though, we should add more text about how services might be related to sensitive information
23:16:13 <JoeAndrieu__> shigeya: common understanding is that the type is clearly defined; as an outsider, that wasn't clear.
23:16:39 <JoeAndrieu__> Orie: one suggestion would be to say that we have many types of verification methods. maybe we need some concrete service types to help illustrate what we are talking about.
23:17:20 <JoeAndrieu__> ... the fact that there is a way to distinguish them is enough for me.
23:17:28 <JoeAndrieu__> agropper: ok. moving on.
23:18:27 <JoeAndrieu__> ... Manu could you take a stab at replying to Tom's items?
23:18:30 <JoeAndrieu__> manu: sure.
23:18:59 <TallTed> TallTed has joined #did-topic
23:19:27 <JoeAndrieu__> agropper: LD security. Can we downgrade security settings?
23:21:10 <JoeAndrieu__> jandrieu: seems like we don't provide any mechanisms for downgrading default browser security mechanisms
23:21:20 <TallTed> present+
23:21:39 <JoeAndrieu__> agropper: next
23:22:38 <JoeAndrieu__> orie: public key representations and signature suites are different things
23:23:55 <JoeAndrieu__> orie: this used to have some different text that I was responding to. I think we can just dismiss the comment completely.
23:24:20 <JoeAndrieu__> consensus: yes, let's resolve
23:24:45 <JoeAndrieu__> agropper: next
23:24:57 <JoeAndrieu__> ... accepting suggestions on passive network attacks
23:25:09 <JoeAndrieu__> ... next are some easy ones (resolving)
23:25:23 <JoeAndrieu__> ... more editorial changes (resolving)
23:28:20 <JoeAndrieu__> joeandrieu: we should probably say that DID Methods and DID Resolution, which define the protocols over the network, are subject to active attacks, however this specification does not define anything subject to such attacks.
23:29:21 <JoeAndrieu__> agropper: can we move on?
23:29:26 <JoeAndrieu__> orie: looks great
23:29:31 <JoeAndrieu__> agropper: next
23:30:30 <JoeAndrieu__> manu: we should talk about that 51% attack #
23:30:41 <JoeAndrieu__> ... should really be something like 2f+1
23:33:21 <JoeAndrieu__> joeandrieu: something that the problem applies to methods that rely on consensus
23:34:27 <JoeAndrieu__> agropper: we're good?
23:34:39 <JoeAndrieu__> consensus: yep
23:34:45 <JoeAndrieu__> agropper: next
23:35:03 <JoeAndrieu__> kdenhartog: I'm good with Orie's adjustments
23:35:08 <JoeAndrieu__> agropper: I'm accepting it
23:35:38 <JoeAndrieu__> agropper 3.4 also?
23:35:48 <JoeAndrieu__> orie: yep that's a continuation of Kyle's items
23:35:58 <JoeAndrieu__> agropper: next, legitimate misuse
23:36:17 <JoeAndrieu__> kdenhartog: this is calling out that you can publish things about the user, that's still a misuse
23:36:47 <JoeAndrieu__> orie: disclosing any information you aren't the rightful controller of, is a legitimate misuse.
23:37:06 <JoeAndrieu__> kdenhartog: yes, let's call out that distinction
23:37:42 <JoeAndrieu__> orie: note there is a link explaining the meaning of legitimate misuse
23:39:02 <JoeAndrieu__> kdenhartog: we might want to call out contexts that use unique identifiers to identifier resolution of the did document
23:40:15 <JoeAndrieu__> ... that is if you copy the context into your DID Document, you can trigger a resolution to that context
23:40:31 <JoeAndrieu__> Orie: mugshots use case
23:40:47 <JoeAndrieu__> ... about the intention to provide types for DIDs that are incorrect
23:41:07 <JoeAndrieu__> ... that is the assignment of attributes that are not under the control of the controller
23:41:58 <JoeAndrieu__> ... e.g., MS allows the assignment of a type property like "software package", which can be abused by a controller assigning the wrong type
23:42:35 <JoeAndrieu__> ... There is a general category for software services that are safe harbors for criminal activity. Any public DID method is at risk for such consideration.
23:43:29 <JoeAndrieu__> talltree: this is not something specific to DIDs
23:43:50 <JoeAndrieu__> ... because DIDs are associated with a quality of immutability, it accentuates the potential for that kind of abuse
23:44:25 <JoeAndrieu__> kdenhartog: we inherit these issues when methods are ledger based
23:45:32 <JoeAndrieu__> agropper: next
23:45:51 <JoeAndrieu__> orie: yes, we address data minimization. tell them to read the friendly spec
23:46:23 <JoeAndrieu__> talltree: data minimization is an important consideration in this specification and we cover it extensively
23:47:11 <JoeAndrieu__> next: 4.2
23:47:39 <JoeAndrieu__> orie: this is pretty good. the piece about the spec registries maybe should be bolded.
23:47:59 <JoeAndrieu__> ... anytime you take an extension your are extending the privacy set of considerations
23:48:10 <JoeAndrieu__> agropper: ok. next
23:49:18 <JoeAndrieu__> orie: we can maybe remove the link, if someone can vet that the URL supports the assertion.
23:49:24 <JoeAndrieu__> consensus: yep.
23:49:46 <JoeAndrieu__> agropper: next
23:52:13 <JoeAndrieu__> joeandrieu: drop the feature should include any protocols. we dropped that to focus on a data model spec
23:55:13 <JoeAndrieu__> ... perhaps listing all of the features that are optional, which are mechanisms to "drop the feature" as appropriate.
23:55:29 <JoeAndrieu__> agropper: this is the last thing, modulo comments that came in above since our last meeting
23:57:59 <JoeAndrieu__> kdenhartog: time check
00:01:15 <JoeAndrieu__> manu: time's up we should wrap
00:01:24 <JoeAndrieu__> ... a few of us can stay and wrap
00:02:03 <JoeAndrieu__> ... 10 minutes max
00:07:02 <JoeAndrieu__> manu: I think that's in. Adrian, are you happy taking this to the next step?
00:07:39 <JoeAndrieu__> ... just the top section
00:07:46 <JoeAndrieu__> joeandrieu: yep, that looks great
00:08:06 <JoeAndrieu__> manu: adrian, can you notify the group that we are done here, so the chairs know we can engage the TAG and PING
00:08:09 <JoeAndrieu__> agropper: yep.
00:08:14 <JoeAndrieu__> that's a wrap
00:08:58 <manu> rrsagent, draft minutes
00:08:58 <RRSAgent> I have made the request to generate https://www.w3.org/2020/12/08-did-topic-minutes.html manu
00:09:24 <manu> rrsagent, make minutes public
00:09:24 <RRSAgent> I'm logging. I don't understand 'make minutes public', manu.  Try /msg RRSAgent help
00:09:28 <manu> rrsagent, make logs public
00:09:31 <manu> rrsagent, draft minutes
00:09:31 <RRSAgent> I have made the request to generate https://www.w3.org/2020/12/08-did-topic-minutes.html manu
00:10:49 <manu> s/scribe: JoeAndrieu_/scribe: JoeAndrieu__/g
00:10:56 <manu> rrsagent, draft minutes
00:10:56 <RRSAgent> I have made the request to generate https://www.w3.org/2020/12/08-did-topic-minutes.html manu
00:25:10 <kristina> kristina has joined #did-topic
01:37:47 <Zakim> Zakim has left #did-topic
07:32:17 <ivan> ivan has joined #did-topic
09:57:11 <ivan> ivan has joined #did-topic