15:37:44 RRSAgent has joined #vcwg 15:37:44 logging to https://www.w3.org/2022/11/30-vcwg-irc 15:37:46 RRSAgent, make logs Public 15:37:48 please title this meeting ("meeting: ..."), ivan 15:38:10 Meeting: Verifiable Credentials Working Group Telco 15:38:10 Date: 2022-11-30 15:38:10 Agenda:https://www.w3.org/events/meetings/3094a419-a55e-4608-aac1-6144804c5201/20221130T110000 15:38:10 chair: kristina 15:38:10 ivan has changed the topic to: Meeting Agenda 2022-11-30: https://www.w3.org/events/meetings/3094a419-a55e-4608-aac1-6144804c5201/20221130T110000 15:39:00 TallTed has joined #vcwg 15:53:26 Karen has joined #vcwg 15:57:53 present+ 15:57:58 present+ 15:58:02 present+ stenr 15:58:58 kristina has joined #vcwg 15:59:01 present+ 15:59:06 present+ orie 15:59:13 David_Waite has joined #vcwg 15:59:23 brentz has joined #vcwg 15:59:39 present+ 15:59:54 present+ dwaite 15:59:55 present+ 16:00:23 present+ shigeya 16:00:46 Kerri_Lemoie has joined #vcwg 16:01:30 oliver has joined #vcwg 16:01:34 present+ oliver 16:01:44 present+ 16:01:53 present+ oliver, abranson, davidc 16:01:57 present+ TallTed 16:02:04 present+ drummond 16:02:11 DavidC has joined #vcwg 16:02:15 present+ 16:02:22 present+ elfors 16:02:25 present+ manu 16:02:41 present+ kerri 16:02:49 SebastianElfors has joined #vcwg 16:02:49 present+ dlehn 16:02:58 Phil has joined #vcwg 16:03:25 scribe+ Kerri_Lemoie 16:03:53 present+ jandrieu 16:04:19 present+ phil 16:04:27 present+ 16:04:41 present+ juancaballero 16:05:40 Kristina: agenda... work items, topic: evidence or holder binding? 16:05:43 +1 to discuss holder binding :) 16:06:11 JoeAndrieu has joined #vcwg 16:06:28 Kristina: asks to indicate in IRC topic choice 16:06:43 kristina: introductions or reintroductions? 16:07:13 present+ selfissued 16:07:25 topic: Process issues 16:07:51 cabernet has joined #vcwg 16:07:55 present+ 16:07:55 brent: process for adoption of work items guidelines suggestions 16:08:00 present+ cabernet 16:08:22 selfissued has joined #vcwg 16:08:32 present+ dmitri 16:08:45 s/brent:/brentz: 16:09:19 - within the scope of the charter 16:09:25 bumblefudge__ has joined #vcwg 16:09:32 brent: proposed work items should be in teh scope of charter & W3C; work item needs to have socialization before proposed: 1 week before proposal should have discussion in mailing list with link to doc with proposal; work item should be supported by min 3 companies; based on those guidelines chairs will accept work item as rough consensus (sufficient because concerns about the work item can still be raised on that work item and issues n[CUT] 16:09:33 - proposed by at least 3 participants from different companies 16:09:40 can still be addressed. 16:09:55 q+ 16:10:02 ack manu 16:10:27 dmitriz has joined #vcwg 16:10:54 present+ shawn 16:10:57 manu: does support for the proposal need to come in from just wg participants? Can implementors outside of the WG chime in? 16:11:03 selfissued_ has joined #vcwg 16:11:06 q+ to ask about -1s 16:11:09 present+ 16:11:13 q+ 16:11:52 kristina: supporters defined as co-proposers. If list of implementors included, that will help with the decision. 16:12:23 manu: what happens if there are many -1s on the proposal that outweigh +1s? 16:12:23 q- 16:12:58 kristina: case by case basis by chairs. Ideally rough consensus is no -1 or few -1. 16:13:29 kristina: case by case decided by chairs 16:13:50 q+ to note that this could be problematic for VC-* formats. 16:14:11 ack selfissued_ 16:14:15 brent: agreed. 16:15:11 michael: how do we stop it if we really don't think it should be a work item? 16:15:55 kristina: timeline provides time to express opinions/interest and there will be a discussion. Time built in to support rough consensus. 16:15:56 ack manu 16:15:56 manu, you wanted to note that this could be problematic for VC-* formats. 16:15:57 s/michael/selfissued/ 16:17:37 Orie has joined #vcwg 16:17:39 present+ 16:17:43 q+ 16:17:54 zakim, close the queue 16:17:54 ok, kristina, the speaker queue is closed 16:18:00 manu: concern about pitting specs against each other. Concerned that put the wg in situation where things the charter will get multiple -1s. Concern that hcanging interpretation of charter by not allowing enough incubation. 16:18:15 s/hcanging/changing 16:18:45 q+ 16:19:27 manu: speaking about concerns... potentially cut off work items too soon and cause conflict 16:19:44 shawnb has joined #vcwg 16:19:48 present+ 16:19:54 present+ steve_c 16:20:47 ChristopherA has joined #vcwg 16:20:51 present+ christoferA 16:20:52 present+ 16:21:09 kristina: clarification - if there is no consensus that the work shouldn't be included, then it won't be and vice versa. 16:21:10 q+ to request a re-vote on JSON Web Signature 2020. 16:21:11 q+ 16:21:30 notes: "The Working Group" includes the members that voted the way Manu mentioned. 16:21:57 It's healthy for a working group to make choices 16:22:12 it's healthy for a WG to make choices when everyone is on the same page with how the choices were made. 16:22:15 ack Orie 16:22:19 It's healthy as long as those choices are well understood / there is a shared understanding by those voting. 16:22:32 It's clear that we were not on the same page when we voted. 16:23:51 orie: members have limited bandwidth and process to work together leads to velocity but focusing on contentious issues on special topics call causes issues for working together ongoing. 16:24:23 I agree with Orie that it's important to realize that just because something's in the charter, it doesn't mean that we're going to do it 16:24:27 +1 to the concept of "emotional debt" which really resonates with me 16:24:36 kritsina: process proposalfor new topics not related to special topics calls. 16:24:41 q? 16:24:48 zakim, open the queue 16:24:48 ok, kristina, the speaker queue is open 16:24:49 topic: work item status updated 16:24:51 s/proposalfor/proposal for 16:24:54 q+ 16:24:58 ack manu 16:25:05 https://github.com/w3c/vc-data-model/ 16:25:14 subtopic: https://github.com/w3c/vc-data-model/pull/969 16:25:15 subtopic: vcdm 16:25:50 substopic: https://github.com/w3c/vc-data-model/pull/987 16:25:55 manu: objections to PR for nonTransferavke property; 969 - could use a special topics call 16:26:35 s/nonTransferavke/nonTransferabke/ 16:26:38 manu: 987 adds presentation schema - has a couple of reviews, oliver& manu have questions. Explore at special topic call? Please take a look and add your questions. 16:26:52 s/substopic/suptopic/ 16:27:11 s/suptopic/subtopic/ 16:27:14 q+ 16:27:18 q+ 16:27:21 kristina: was this filed as PR without discussion? 16:27:34 manu: yes but in the past we allowed for this 16:27:41 https://github.com/w3c/vc-data-model/issues/960 might be the issue 16:27:44 kristina: would be better to have an issue for the discussion 16:27:49 subtopic: https://github.com/w3c/vc-data-integrity/ 16:27:54 s/this/969/ 16:27:54 q- 16:28:19 q+ 16:28:20 manu: no open PRs on data integrity 16:28:26 ack Orie 16:28:33 q+ 16:28:41 orie: json web signature 2020 - open PR 16:28:45 https://github.com/w3c/vc-jws-2020/pull/24 16:29:55 orie: encourage wg members to review and add comments/questions/suggestions; what role does W3C have in relation to work items outside of W3C? 16:30:23 https://github.com/w3c/vc-jwt/pull/11 16:30:49 ack ivan 16:30:49 orie: has only one approval -- could indicate general lack of interest and focus on other issues - perhaps pause? 16:30:55 +1 for pausing VC-JWT work item. 16:31:13 (given the recent discussion around how we're going to process Work Items) 16:31:15 I am somewhat surprised at the lack of engagement on that item. 16:31:41 what is ivan's comment in reference to? 16:32:04 and seeing how VC-JWT duplicates work done in JsonWebSignature2020 16:32:05 ivan: reached out to W3C re: https://github.com/w3c/vc-jws-2020/pull/24 16:32:07 Thanks! 16:32:17 There has not been an FPWD for vc-jwt, and I don't recommend we seek one at this time. 16:32:35 ack DavidC 16:32:48 q+ 16:32:54 it is true that VC-JWT is duplicative of JsonWebSignature2020 16:33:03 I would expect multiple -1s for VC-JWT based on engagement and how we're planning to adopt work items now. 16:33:18 DavidC: non-transferrable issue was raised 16:33:42 q+ 16:33:55 DavidC: lots of interest in JWT- like at JFF plugfest. Lack of time but also implementors are getting it to work ok without so many errors as thought. 16:33:56 There were 17 different organizations implementing the DI approaches... vs. 6 for VC-JWT -- useful information on each cryptosuite. 16:34:26 DavidC: what is the difference between a credential and a verifiable credential- add topic to future agenda please? 16:34:52 kristina: chairs will discuss how to resolve that 16:35:03 q+ to note that implementations matter, and you need time to get those. 16:35:04 +1 to discuss David's question. It's a good one for the group to clear up. 16:35:05 ack selfissued_ 16:35:16 zakim, close the queue 16:35:16 ok, kristina, the speaker queue is closed 16:35:55 ack Orie 16:36:10 selfissued_: agree with DavidC that there's a lot of interest in vc-jwot but doesn't indicate that there aren't any problems 16:37:24 orie: issues that remains: 1) mappings to the core data model, 2) concrete documentation on how to define how to obtain a public key to verify a credential. 16:37:38 @Orie did:jwk solves the public key problem 16:38:08 orie: should tackle core-data model issues first 16:38:27 orie: gain wg consensus about core-data model first. 16:38:33 ack manu 16:38:33 manu, you wanted to note that implementations matter, and you need time to get those. 16:38:34 +1 to Orie comment that VC-JWT is in a bad shape 16:38:54 @orie the issue that Joe and I are discussing about credential vs verifiable credential is pertinent to jwt-vc 16:39:07 its not that JWS/JWT or JOSE is in bad shape... its just W3C "versions" of it. 16:40:19 manu: agree in pursuing consensus on JWT but new process could negatively affect this work. Implementors could indicate what they support. 16:40:58 manu: agree to hit pause until the wg can focus on fixing the core data model concerns then comeback to vc-jwt 16:41:00 This is an "unofficial" draft for a vc-jws... which is massively simpler than vc-jwt: https://transmute-industries.github.io/vc-jws/ 16:41:11 Is there a link to VC-JOSE issue? 16:41:36 thanks 16:41:40 kristina: This work can happen within the process. Thank you for raising this topic. Chairs will discuss. 16:41:49 Here is the original draft pre IETF 114: https://or13.github.io/draft-osteele-vc-jose/ 16:42:03 topic: holder binding 16:42:07 https://github.com/w3c/vc-data-model/issues?q=is%3Aopen+is%3Aissue+label%3Aholder-binding 16:42:20 Here is the issue regarding vc-jose proposal: https://github.com/w3c/vc-data-model/issues/971 16:42:45 thanks 16:42:56 q+ Oliver 16:42:57 ack Olive 16:43:01 ack Oliver 16:43:05 https://github.com/w3c/vc-data-model/issues/789 16:43:17 zakim, open the queue 16:43:17 ok, kristina, the speaker queue is open 16:44:19 q+ to be supportive of "holder binding" in some form. 16:44:23 oliver: There's a lot of interest in this binding type so verifier can run checks easier. 16:44:27 q+ to say as framed, holder binding is out of scope, but there is a way forward 16:46:10 oliver: we have two options: 1) include some info in the VC or in the VP or both; VC: bioemtircs, identifiers, etc. VP: additional proofs or other property 16:46:48 https://github.com/w3c/vc-data-model/issues/923 16:46:53 Options described here: https://github.com/w3c/vc-data-model/issues/789#issuecomment-1332318257 16:47:10 oliver: listing issues 16:48:04 oliver: the question is should holder binding be added to the VC, VP or both? 16:48:14 ack manu 16:48:14 manu, you wanted to be supportive of "holder binding" in some form. 16:48:23 kristina: suggest poll 16:48:45 q+ 16:48:54 manu: db is suggested in discussing holder binding; evidence was suggested prior but it doesn't entirely address concerns in the issue. 16:49:07 manu: maybe a special topic call? 16:49:20 https://github.com/WebOfTrustInfo/rwot11-the-hague/blob/master/draft-documents/verfiable-credentials-holder-binding.md 16:49:32 manu: (to oliver) do you have neough info to put together a PR or do you need guidance from the WG? 16:49:38 s/db is suggested in/DB is supportive of/ 16:49:43 ack JoeAndrieu 16:49:43 JoeAndrieu, you wanted to say as framed, holder binding is out of scope, but there is a way forward 16:49:45 s/neough/enough 16:49:47 q+ 16:50:56 +1 the stuff referred to as "holder binding" is an application of business logic 16:50:57 JoeAndrieu: there's nothing in the charter or spec that discuss control of VCs- use is out of scope. Control handling is a business decision to check. 16:50:59 q+ 16:51:59 JoeAndrieu: to add certainty to holder verification - define a claims vocab to describe privileges. Need a concrete way for a user to make a claim to claims. 16:52:17 JoeAndrieu: against adding any of this to the core data model. 16:52:24 ack Orie 16:52:55 issuer can state facts: I am saying about to 16:53:02 +1 to fleshing out evidence types 16:53:54 s//``/ 16:53:54 s//``/ 16:54:02 Orie: in relation to evidence to holder binding -- opportunity to have evidence that describes holder and binding while also defending use of evidence property. 16:54:08 ack oliver 16:54:09 s//``/ 16:54:58 +1 to Oliver to create a PR -- understanding that it's probably going to get some push back for trying to do it via `evidence` -- but we do need to discuss this, so supportive of it. 16:55:01 oliver: (to manu) needs more info but can create a PR based on discussions in issues and then take it from there. 16:55:21 ack ChristopherA 16:55:25 kristina: yes - creating a pr is a good idea 16:56:25 ChristopherA why is this an issue for this WG? W3C already defined WebAuthN and platform authenticators use it. 16:56:28 ChristopherA: potential issues with privacy & correlation for parties to lock in people if this is in the core data model. would like to see some privacy considerations be clearly articulated. More comfortable with it in the VP than VC. 16:56:38 q? 16:56:38 kristina: please add those comments in oliver's pr. 16:57:06 present+ 16:57:26 rrsagent, draft minutes 16:57:26 I have made the request to generate https://www.w3.org/2022/11/30-vcwg-minutes.html ivan 16:58:15 zakim, end meeting 16:58:15 As of this point the attendees have been ivan, stenr, kristina, orie, brentz, dwaite, David_Waite, shigeya, oliver, dlongley, abranson, davidc, TallTed, drummond, elfors, manu, 16:58:18 ... kerri, dlehn, jandrieu, phil, juancaballero, selfissued, cabernet, dmitri, shawn, selfissued_, shawnb, steve_c, christoferA, ChristopherA, JoeAndrieu 16:58:18 RRSAgent, please draft minutes 16:58:18 I have made the request to generate https://www.w3.org/2022/11/30-vcwg-minutes.html Zakim 16:58:20 I am happy to have been of service, ivan; please remember to excuse RRSAgent. Goodbye 16:58:24 rrsagent, bye 16:58:24 I see no action items