14:40:49 RRSAgent has joined #vcwg 14:40:50 logging to https://www.w3.org/2022/09/07-vcwg-irc 14:40:52 RRSAgent, make logs Public 14:40:52 please title this meeting ("meeting: ..."), ivan 14:41:10 Meeting: Verifiable Credentials Working Group Telco 14:41:11 Date: 2022-09-07 14:41:11 Agenda: https://lists.w3.org/Archives/Public/public-vc-wg/2022Sep/0004.html 14:41:11 chair: kristina 14:41:11 ivan has changed the topic to: Meeting Agenda 2022-09-07: https://lists.w3.org/Archives/Public/public-vc-wg/2022Sep/0004.html 14:59:09 brentz has joined #vcwg 14:59:27 kristina has joined #vcwg 14:59:37 present+ 14:59:37 present+ 14:59:51 present+ 15:00:06 present+ cabernet 15:00:12 Chris_Abernethy has joined #vcwg 15:00:24 present+ elfors 15:01:07 present+ Will_Abramson 15:01:16 present+ dlongley 15:01:17 decentralgabe has joined #vcwg 15:01:26 present+ gabe 15:01:39 present+ justin 15:01:48 justin_r has joined #vcwg 15:02:06 present+ shigeya 15:03:35 present+ 15:03:38 present+ 15:03:48 present+ 15:03:54 selfissued has joined #vcwg 15:03:59 q+ 15:04:00 present+ selfissued 15:04:09 ack manu 15:04:11 present+ manu 15:04:19 present+ 15:04:26 scribe+ 15:04:39 manu: We could go over registry proposals 15:05:12 present+ phila 15:05:22 phila has joined #vcwg 15:05:27 present+ mahmoud 15:05:33 present+ 15:05:33 kristina: The TPAC agenda is set 15:05:42 ... We're using the regular Zoom link 15:05:58 q+ 15:06:10 ack brentz 15:06:12 sebastianelfors has joined #vcwg 15:06:13 ... People who have been asked to present should have received a deck to add slides to from Brent and me 15:06:33 brentz: Please get your slides in as soon as possible 15:06:44 please put the attendance here: https://docs.google.com/spreadsheets/d/1Du-3G4d08OWxW1fNtn_8BLNsAIT4GETvk7F7v_Mu_dA/edit#gid=179611341 15:06:45 ... We have dinner reservations on Thursday evening 15:06:51 woo, thank you Avast! Very generous to support the dinner :) 15:07:06 ... The restaurant is Joe Fortez 15:07:15 https://www.joefortes.ca/ 15:07:43 kristina: The convention is to cancel the WG meeting the week after TPAC 15:07:56 ... But RWoT is two weeks hence 15:08:05 s/Fortez/Fortes/ 15:08:06 JoeAndrieu has joined #vcwg 15:08:09 ... So could we instead cancel the call two weeks after TPAC? 15:08:17 ... There was agreement to do that 15:08:19 q+ 15:08:26 DavidC has joined #vcwg 15:08:31 topic: PRs 15:08:33 present+ 15:08:34 subtopic: https://github.com/w3c/vc-data-model/pulls 15:08:41 subtopic: https://github.com/w3c/vc-data-model/pull/795 15:08:41 mkhraisha has joined #vcwg 15:08:51 ack manu 15:08:52 manu: 795 is going to remain open until we discuss the holder stuff at TPAC 15:08:53 subtopic: https://github.com/w3c/vc-data-model/pull/922 15:09:06 ... 922 is a suggestion that we update the editors' list 15:09:22 q+ 15:09:28 present+ JoeAndrieu 15:09:37 ... I have objected to the change because it removes people from the bibliography 15:09:54 ... The editors list is really long now 15:10:17 Snorre_ has joined #vcwg 15:10:28 ... I suggest that we update respec to list the primary editors then et. al. 15:10:32 subtopic: https://github.com/w3c/vc-data-model/pull/924 15:10:48 ... 924 Orie has suggested removing proof from the VC context 15:11:06 ... I suggest waiting until after TPAC 15:11:15 subtopic: https://github.com/w3c/vc-data-model/pull/927 15:11:41 q+ 15:11:41 ... Finally, the last one remaining open is 927. Ivan updated the vocabulary to match the VC context. 15:11:56 ... We need one more update of the PR by the editors 15:12:00 ack brentz 15:12:19 brentz: I have no wish to deprive people of credit 15:12:55 ... But our editors' list is ginormous. I propose move people out of the list who are not actively editing now. 15:13:11 ack ivan 15:13:14 ... Let's move them into a Former Editors section. Respec can do that. 15:13:32 ivan: For 927, I have a question there that it would be good to have an answer to. 15:13:51 ... I don't know whether the JSON schema should be deprecated 15:14:03 manu: It has been decprecated 15:14:13 ivan: After that, then we can merge 15:14:22 subtopic: https://github.com/w3c/vc-data-integrity/pull/35 15:14:23 present+ shawn_butterfield 15:14:54 present+ 15:15:02 manu: On Data Integrity, we are waiting for changes from Mike Prorock 15:15:11 subtopic: https://github.com/w3c/vc-data-integrity/pull/49 15:15:41 manu: Ginesh has a change to a potential direction we might go in after TPAC discussions 15:15:44 dmitriz has joined #vcwg 15:16:27 scribe+ 15:16:36 selfissued: I'm not able to do that right now but do plan on paging that in before TPAC. 15:16:45 kristina: For JWT-VC there are two PRs open 15:16:55 ... These are the same PRs that Orie discussed last week 15:17:07 Topic: https://github.com/w3c/vc-data-model/issues?q=is%3Aissue+is%3Aopen+label%3Adiscuss+sort%3Aupdated-asc 15:17:49 kristina: Let's do 2909 15:17:50 subtopic: https://github.com/w3c/vc-data-model/issues/909 15:18:12 ... Manu, can you update us on this? 15:18:30 s/2909/909/ 15:18:37 manu: We theoretically have a registry for VC Extensions registries 15:18:47 https://github.com/w3c/vc-data-model/issues/909#issuecomment-1236394966 15:18:49 ... I took an action to propose answers to these questions 15:19:02 ... I modelled it on the DID registries 15:19:06 q+ 15:19:29 ... These are the initial rules. We will have two years to refine them. 15:19:42 ... This is a starting point. 15:19:46 proposals are here: https://github.com/w3c/vc-data-model/issues/909#issuecomment-1236394966 15:20:02 ... People should read these proposals before TPAC 15:20:36 ... The other thing to note about the proposals is that we're trying to make the registries have a specific format 15:20:46 ... Registrants will fill out a form 15:20:52 ... Then we can create tooling 15:21:13 ack selfissuer 15:21:15 scribe+ dlongley 15:21:42 selfissued: I have a question for Ivan and really for the W3C staff, I know that there have been action items for the W3C in the last few years to create registries and policies so WGs don't have to manage their own registry entries, where are we on that, Ivan? 15:21:59 ivan: I think the only thing that does exist now, is a formal way of declaring something as a registry. 15:22:03 ivan: I think the only thing that exists now is a formal way of declaring something as being a registry 15:22:09 The first proposal provides this text: The VC Extensions Registry will be operated as a W3C Registry by the VCWG as defined in the W3C Process here: https://www.w3.org/2021/Process-20211102/#registries 15:22:36 ... The only thing that that entails today is that the policy of maintaining the registry has to be approved by the AC 15:22:52 Orie has joined #vcwg 15:22:55 present+ 15:22:58 ... The other person who was involved was Phil Archer 15:23:07 q+ 15:23:20 ack selfissued 15:23:43 selfissued: First, confirming, there is no plan to develop the equivalent of IANA so there's a neutral party for registries in W3C, right? 15:23:47 ivan: What you say is correct. 15:24:12 +1 on using IANA and established processes 15:24:34 q+ 15:24:34 q+ to comment on neutrality of registries 15:24:35 selfissued: I'll put this in the issue. The alternative is to use IANA, which is a neutral 3rd party which won't do what the DID WG did and make value judgments about whether things are good or bad entries. An example of that is the WebAuthn WG established a tool to create registries for IANA. 15:25:01 selfissued: I want us to at least consider that since W3C has no registry mechanism of its own. My personal experience watching the DID WG try to maintain its own registries ... I was horrified and we shouldn't do that. 15:25:04 ack ivan 15:25:25 TallTed has joined #vcwg 15:25:34 ivan: I'm not aware of any attempt at the W3C to establish the equivalent of IANA 15:25:40 selfissued: I wanted to put some of that out for those on the call now and agree we should discuss at TPAC, I'm on the hook for doing a registries presentation already. 15:25:40 +1 to mike. 15:26:00 ack phila 15:26:00 phila, you wanted to comment on neutrality of registries 15:26:12 kristina: The purpose of raising this was for people to be aware of the registry issue 15:26:48 phila: When I add things to an IANA registry it basically just has to be in a stable document 15:26:49 +1 to "the neutrality comes from the process" 15:26:53 q? 15:27:00 ... It goes to a designated expert, often Mark Nottingham 15:27:16 ... It's the process that ensures neutrality 15:27:18 https://github.com/w3c/vc-data-model/issues/913 15:27:21 subtopic: https://github.com/w3c/vc-data-model/issues/913 15:27:41 kristina: validFrom ... validUntil 15:27:42 q+ 15:27:47 q+ 15:28:03 present+ 15:28:09 kristina_ has joined #vcwg 15:28:16 ack selfissued 15:28:20 selfissued: There's a discussion, which I understand predates my involvement about possibly deprecating `issuedDate` and replacing it with `validFrom` and possibly deprecating `expirationDate` and replacing it with `validUntil`. 15:29:00 https://github.com/w3c/vc-data-model/pull/927 15:29:14 selfissued: There was a useful discussion on the issue about what use cases might exist for having a `validFrom` period that differs from the `issuanceDate`. In particular, the example was given of a future-dated coupon which starts being valid on maybe July 4th 2023 and is valid through July 4th 2024 but you could hand that out to people now. I understand that and it's a reasonable thing to do. 15:29:16 q+ 15:29:18 Snorre has joined #vcwg 15:29:30 selfissued: That said, I believe the predominant case is that stuff is valid when issued and that's what we should optimize for. That's the same that we did in JWTs. 15:29:59 selfissued: There's typically always an issued at (iat) time and an expiration time. If you want it to be valid from a different time from the issuance then you add the optional claim to indicate that. 15:30:05 selfissued: (nbf) 15:30:28 ack manu 15:30:38 selfissued: If it ever valuable to have a valid until that is different from the expiration date -- and no one has given a use case so I'd be happy to just leave `expirationDate` alone and not have that. 15:30:46 q+ 15:30:47 manu: There are a couple of things wrapped up in this issue 15:31:11 ... Manu said that people thought that people couldn't include a time 15:31:25 ... We put in a deprecation warning because of that 15:31:36 ... We said that we were going to rename it 15:31:48 shawnb has joined #vcwg 15:31:56 ... The first issue is that we named these properties in a misleading way 15:32:21 ... The second issue is that there's a strict difference between the validity period of a credential and when it was signed 15:32:32 +1 manu, we also want to separate "the data model" from "securing it". 15:32:39 ... As Mike said, when a coupon was signed and when it becomes valid are different 15:32:55 ... Retailers need to distribute digital coupons before they come into play 15:33:03 ... This is a real retail use case 15:33:06 q+ 15:33:33 ... The other side of that is that the validity period of a credential can be different from the validity period of a digital signature 15:34:08 ... A passport or driver's license has a validity period independent of the signature validity period 15:34:33 ack DavidC 15:34:36 ... A driver's license that has expired doesn't change a person's birthday 15:34:44 ... We shouldn't conflate them 15:35:14 DavidC: A UK driver's license expires when you become 65 15:35:28 ... Whereas the signature will expire well before that 15:35:30 ack Orie 15:35:44 ... Some of these pertain to the claims and some pertain to the cryptography 15:36:13 ack selfissued 15:36:15 Orie: The validity period for a credential is different from the validity period for crypto 15:36:24 +1 DavidC, all cryptography has a shelf life that does not match always match the life of the claims the issuer is making. 15:36:46 selfissued: I was going to advertise Orie's presentation at TPAC, which is, I believe he's going to explicitly talk about clear semantic distinctions between properties of the Verifiable Credential and properties of the signatures used to secure them. 15:36:52 I will attempt to cover this in my TPAC talk, I make not promises for success. 15:37:09 selfissued: I think some of this discussion would be well informed by a clear separation of those two concerns. There may be relationships between the two sets of dates but we should be clear about them. 15:37:24 q+ 15:37:37 present+ orie 15:37:41 present+ TallTed 15:37:44 we have been clear in the textual description, some developers don't have time to read specs. :) 15:37:48 ack TallTed 15:37:49 selfissued: Also responding to a comment Manu made a few minutes ago -- the fact that it's called `issuanceDate` and that you couldn't put a time, is a documentation time. We should just be clear in the definition what it means. That's not sufficient for making a breaking change, we should just fix the documentation, not change the property name. 15:38:05 TallTed: It's not a documentation error. The documentation was quite clear. 15:38:24 ... The humans will still make the mistakes 15:38:40 +1 to what TallTed is saying, we have to take the human element into consideration here. 15:38:46 ... Documentation does not fix issues like this 15:38:50 q+ 15:39:14 ack selfissued 15:39:30 q+ 15:39:31 selfissued: If implementers aren't using our specifications, there's not much point in us writing them. 15:39:44 ack TallTed 15:40:11 TallTed: Humans are fallible. They do not recall everything they read. 15:40:27 ... We are writing the spec for humans to implement them 15:40:36 ... What we can fix, we should fix 15:40:39 Naming things is hard. Really hard. 15:40:52 ... We can fix things by using better names 15:41:12 kristina: It seems like people care a lot about this 15:41:20 subtopic: https://github.com/w3c/vc-data-model/issues/902 15:41:24 q+ 15:41:26 ... Please read the specs and suggest ways to make things clearer 15:41:29 ack orie 15:41:52 Orie: We created the spec to have a term for presenting 15:42:08 ... It's important to acknowledge the different roles for being a holder 15:42:48 ... It's dangerous to have terms in VPs that are undirected. The holder label is undirected. 15:43:12 ... It would be better for the entity making the presentation to be able to assert that "I am presenting or I am receiving". 15:43:21 ... We want directed intentionality in the data model 15:43:34 ... That's why we need additional terms related to the holder role. 15:43:41 q+ 15:43:50 kristina: There's a suggestion to use presenter 15:43:51 ack JoeAndrieu 15:44:26 JoeAndrieu: It makes sense to add both recipient and presenter for what we're currently calling holder 15:44:30 +1 to defining the roles in a directional manner. 15:44:33 q+ 15:44:35 ... That's an iteration on this conversation 15:44:49 ack manu 15:44:51 kristina: There is a consensus to have two terms 15:45:07 manu: Are we talking about getting rid of holder or saying that holders have two things that they can do 15:45:09 +1 to the latter formulation manu 15:45:27 ... I wondering if issuers can receive and present as well 15:45:28 q+ 15:45:39 ack JoeAndrieu 15:45:41 ... It's a question we have to answer for each of the current roles we have 15:45:55 JoeAndrieu: We would benefit from keeping holder and clarifying it 15:45:59 +1 Joe 15:46:16 ... The issuer/holder/verifier is a very powerful group of terms 15:46:33 ... We should elaborate on them 15:46:53 +1 to chat at TPAC 15:46:54 kristina: This is the first time we're talking about this issue 15:47:03 ... Let's give people time to think about it 15:47:23 https://github.com/w3c/vc-data-model/issues/895 15:47:34 kristina: Authentic Chained Data Containers (ACDC) 15:47:52 ... Sam Smith will give us a presentation on ACDC on the first day of our TPAC meetings 15:48:06 kristina: I'd like to move to issues without the tag Discuss 15:48:13 topic: https://github.com/w3c/vc-data-model/issues?q=is%3Aissue+is%3Aopen+sort%3Aupdated-asc 15:48:37 subtopic: https://github.com/w3c/vc-data-model/issues/758 15:48:38 kristina: Issue: Fix the data model namespace 15:49:04 orie: It seems that someone has fixed some parts of this recently 15:49:19 ... There are term definitions that we're working to create 15:49:28 ... We want to be able to read the definitions for those terms 15:49:41 q+ 15:49:43 ... You can read them in the registry where they're specified 15:50:09 ... You want to be able to click the link for a term definition and read the definition 15:50:23 ... We should make sure that our term links are clickable 15:50:23 ack ivan 15:50:35 ivan: This is exactly what the vocabulary work does 15:50:54 ... Now it's such that if you take the URL of a term, it will go there 15:51:10 ... Temporarily, the links go to the V1 vocabulary 15:51:28 ... Eventually we will point to the official V2 vocabulary 15:51:28 I suggest closing after PR is merged 15:51:33 ... I think this issue can be closed 15:51:34 We shoudl wait until PR is merged. 15:51:44 s/shoudl/should/ 15:51:53 kristina: We will close it after the PR is merged 15:51:57 subtopic: https://github.com/w3c/vc-data-model/issues/731 15:52:24 kristina: There's a lot of comments in the issue 15:52:35 q+ 15:52:43 ack manu 15:52:51 DavidC: I don't know where this issue stands. 15:53:08 manu: There's a suggestion that we add a non-transferrable property to the context 15:53:25 ... The part of the spec that talked about non-transferrable was non-normative 15:53:40 ... I don't know if there are new use cases or new data for this property 15:53:43 there are use cases for non transferable... see NFTs. 15:54:03 ... You can always add this by putting it in an extension context and using it 15:54:04 q+ 15:54:20 ack JoeAndrieu 15:54:21 ... Do we want to define this in the base data model or is it something people should define if they need it 15:54:43 JoeAndrieu: I think this is an unfortunate property and I don't think we should support it 15:54:58 ... VCs are statements. It makes no sense to transfer statements. 15:55:00 q+ 15:55:05 +1 to JoeAndrieu 15:55:08 ack DavidC 15:55:11 ... What does it mean to transfer the statement "The sky is blue" 15:55:42 DavidC: Some of the plastic cards in my wallet are not transferrable 15:55:51 ... That's why the property was invented 15:56:00 what if the statement is, "the holder of this credential is my friend." ? 15:56:06 kristina: It was a bit ambitious to try to tackle this in 5 minutes 15:56:11 ... Please review 15:56:25 ... See you all virtually or in person at TPAC! 15:56:34 rrsagent, draft minutes 15:56:34 I have made the request to generate https://www.w3.org/2022/09/07-vcwg-minutes.html ivan 15:57:28 zakim, end meeting 15:57:28 As of this point the attendees have been kristina, brentz, ivan, cabernet, elfors, Will_Abramson, dlongley, gabe, justin, shigeya, manu, justin_r, Chris_Abernethy, selfissued, 15:57:31 ... phila, mahmoud, DavidC, JoeAndrieu, shawn_butterfield, Snorre_, Orie, TallTed 15:57:31 RRSAgent, please draft minutes 15:57:31 I have made the request to generate https://www.w3.org/2022/09/07-vcwg-minutes.html Zakim 15:57:33 I am happy to have been of service, ivan; please remember to excuse RRSAgent. Goodbye 15:57:34 rrsagent, bye 15:57:34 I see no action items