15:47:53 RRSAgent has joined #vcwg 15:47:57 logging to https://www.w3.org/2023/02/08-vcwg-irc 15:48:02 Zakim has joined #vcwg 15:50:43 zakim, start the meeting 15:50:43 RRSAgent, make logs Public 15:51:16 please title this meeting ("meeting: ..."), brentz 15:51:16 meeting: VCWG Teleconference 15:51:16 chair: Brent Zundel 15:52:32 brentz has changed the topic to: VCWG Meeting 2023-02-08: https://www.w3.org/events/meetings/3094a419-a55e-4608-aac1-6144804c5201/20230208T110000 15:53:32 Phil-ASU has joined #vcwg 15:59:57 cabernet has joined #vcwg 16:00:03 present+ 16:00:19 present+ 16:00:34 present+ 16:01:44 DavidC has joined #vcwg 16:01:49 present+ 16:02:32 present+ 16:02:32 mprorock has joined #vcwg 16:02:32 JoeAndrieu has joined #vcwg 16:02:32 present+ 16:02:32 Will has joined #vcwg 16:02:32 present+ 16:02:32 present+ 16:02:46 scribe+ 16:02:54 decentralgabe has joined #vcwg 16:03:21 present+ 16:03:29 Orie has joined #vcwg 16:03:31 present+ 16:04:08 present+ 16:04:40 brentz: agenda - f2f meeting, code of ethics, work item status & prs, open issues 16:04:59 q+ 16:05:04 ack manu 16:05:15 manu: is the slide deck available 16:05:30 brentz: yes, slide deck for f2f is available 16:05:46 ... links will be sent out to group 16:06:03 ... any introductions 16:06:27 Topic: F2F Meeting 16:06:55 brentz: space for 16 ppl but 18 attendees. Room might be tight 16:07:12 ... catering for 15 currently 16:07:24 ... meeting 9-5 from 14th to 16th of Feb 16:07:42 ... afternoon on 15th we have a boat cruise planned. Cost is 30 dollars 16:07:53 ... lunches sponsored thanks to mesur.io 16:08:01 ... and Q's? 16:08:09 Topic: CEPC Conversation 16:08:34 brenz: reminder of code of ethics. Chairs have recieved several compaints recently 16:08:52 ... need to make extra effort to be kind. Give folks the benifit of the doubt. 16:09:34 ... happy to take questions 16:09:40 Topic: Work Item status updates/PRs 16:09:42 q+ 16:09:51 ack manu 16:09:51 q+ 16:09:56 Kerri_Lemoie has joined #vcwg 16:10:16 manu: issue #987 awaiting broader discussion 16:10:41 ... issue #1014 turned into lengthy discussion with some disgreement 16:10:43 Indeed we will cover it during the F2F. 16:10:47 ... expected to deal with at f2f 16:11:14 subtopic: https://github.com/w3c/vc-data-model/pull/1026 16:11:28 manu: might remove zkp section 16:11:38 present+ 16:11:40 ... also have new P.R that changes the zkp section 16:11:49 ... need to decide how we are going to proces these 16:11:59 ... thoughts? 16:12:34 brentz: #1030 incorporates and slightly changes the wording of #1026 16:12:39 subtopic: https://github.com/w3c/vc-data-model/pull/1030 16:12:56 ... should be straightforward to adjust further or get rid of the section 16:13:08 manu: orie suggests process in order. Doing that 16:13:40 present+ 16:13:44 ... processing #1026, #1028 then need review on #1030 16:13:51 subtopic: https://github.com/w3c/vc-status-list-2021/pull/45 16:13:56 ... vc status list has 3 PRs 16:14:10 ... good discussion about bitstring encoding 16:14:22 ... no one way to encode bitstrings 16:14:32 ... need to specify how to do this in spce 16:14:52 ... going to ask if dwight is objecting 16:14:59 ... implementers need to know to check impls 16:15:11 subtopic: https://github.com/w3c/vc-status-list-2021/pull/46 16:15:25 present+ 16:15:32 ... about if status list can be dereferenced 16:15:40 ... some objections 16:16:03 ... status list can live on any url, so not sure if we should get specific about http 16:16:11 subtopic: https://github.com/w3c/vc-status-list-2021/pull/53 16:16:27 ... ted asking for editorial changes 16:16:33 ... looks like it is going to go in soon 16:16:44 subtopic: https://github.com/w3c/vc-di-eddsa/pull/24 16:16:46 ... moving on to edwards curve suite 16:17:00 ... p.r. to update test vectors 16:17:22 ... good job, but not a working group member 16:17:45 ... doesn't look like any ipr issues. needs to be cleared for IP 16:17:56 ... thats it 16:17:58 ack Orie 16:18:01 https://github.com/w3c/vc-jwt/pull/44 16:18:08 orie: One open p.r. for vc jwt 16:18:19 ... build on previous discussions around media type 16:18:29 subtopic: https://github.com/w3c/vc-jwt/pull/44 16:18:31 ... some off topic conversations moved to other issues 16:18:48 ... expect to spend time at f2f discussing this 16:19:06 brentz: any other updates about work items 16:19:14 Topic: https://github.com/w3c/vc-data-model/issues?q=is%3Aissue+is%3Aopen+label%3Adiscuss+sort%3Aupdated-asc 16:19:21 ... move on to issue processing 16:19:41 mkhraisha has joined #vcwg 16:19:42 ... skipping #988 as holder discussion queued for f2f 16:19:47 steve_mccown has joined #vcwg 16:19:51 subtopic: https://github.com/w3c/vc-data-model/issues/985 16:20:01 ... enable cbor representations of VCs 16:20:03 q+ 16:20:10 Present+ 16:20:15 ... suggest we should aim for CBOR representation for data model 16:20:20 q+ 16:20:26 ack Orie 16:20:48 Orie: has been proposal for cbor in P.R #1000 16:21:13 ... conversations around content type property in cose and jose. I will add some links 16:21:22 ... looking forward to discuss at f2f 16:21:23 ack manu 16:21:57 manu: already cbor representations for VCs. Not standardised. Have cbor-ld that will take jsonld VCs and compress 16:22:00 ... not standardised 16:22:08 ... has been used in various pilot programs 16:22:11 ... going into prod 16:22:33 ... strongly suggest we don't pick this up at the moment. Have enough on our plate 16:22:43 ... could provide impl guidlines for cbor 16:23:00 ... instead of creating a new work item 16:23:09 brentz: any other comments 16:23:32 KDeanGS1 has joined #vcwg 16:23:37 subtopic: https://github.com/w3c/vc-data-model/issues/902 16:24:06 ... define prover in addition to holder. What to folks think? 16:24:16 ... not sure if we are at a point of agreement on next steps 16:24:19 q+ 16:24:26 ack Orie 16:24:48 Orie: issue describes itself. Main problem is association with holder binding 16:24:58 ... become inactionable due to this 16:25:05 bumblefudge_ has joined #vcwg 16:25:24 ... original intention was to describe that holder undirected. Might want to make it clear the direction 16:25:38 ... suggest entire data model blocked by holder binding conversation 16:25:52 ... don't have def with requirements at presentation layer that is useful 16:26:06 ... hopfully untangle at f2f 16:26:10 q+ 16:26:31 ack manu 16:26:31 andres has joined #vcwg 16:26:53 manu: orie took shot at high level definitions, longley added some suggestions. Sparked massive discussions 16:26:57 q+ 16:27:05 ... could be that we don't need yet another role or term in ecosystem 16:27:07 ack DavidC 16:27:14 zakim, who is here? 16:27:14 Present: brentz, cabernet, shigeya, DavidC, dlongley, TallTed, JoeAndrieu, Will, mprorock, Orie, manu, decentralgabe, Kerri_Lemoie, dlehn, mkhraisha 16:27:16 On IRC I see andres, bumblefudge_, KDeanGS1, steve_mccown, mkhraisha, Kerri_Lemoie, Orie, decentralgabe, Will, JoeAndrieu, mprorock, DavidC, cabernet, Phil-ASU, Zakim, RRSAgent, 16:27:16 ... brentz, TallTed, tzviya, dlehn, npd, w3c_modbot, stenr_, cel[h], ounfacdo, dlongley, csarven, manu, shigeya, cel, Dongwoo, stonematt, bigbluehat, hadleybeeman, bumblefudge, 16:27:16 ... cel[m], rhiaro 16:27:18 DavidC: I think we need two new terms. Get rid of holder all together 16:27:27 ... two new terms issuee and presenter/prover 16:27:32 ... those roles never change 16:27:46 ... holder always changes because vcs passed between holders 16:27:53 +1 16:27:58 ... holder does not participate in anything particularly 16:28:11 brentz: thanks for convo. moving on 16:28:18 subtopic: https://github.com/w3c/vc-data-model/issues/860 16:28:29 ... determine interoperable way to make claims directly in VPs 16:28:30 present+ 16:28:36 ... joe raised issue 16:28:47 +1 to David C's statement about holders as indeterminant, not having a defined actionable role. 16:29:04 JoeAndrieu: not much convo back and forth. Last time there was some pushback on call 16:29:27 ... tension is do we want to reuse the VC and require a second sig 16:29:31 good point phil-- yes, +1 to that :D 16:29:41 q+ 16:29:41 ... or is there a way to use a property in the VP and let signer put some assertions in there 16:29:49 ack manu 16:29:52 ... manu and dave thought VC approach better 16:30:03 manu: concern is that we have primitive already. That is the VC 16:30:14 +1 to reusing the primitive we have already and using composition 16:30:17 ... can we compose it. VC allows us to say anything about anyone 16:30:45 ... Additional VC could contain any of the additional contents that an additional property might contain 16:30:52 ... is true that it would be an additional thing to be issued and signed 16:31:24 q+ to say its about definitively declaring the semantics of that VP 16:31:32 q+ to ask what about a new property who's value must eb a VC? 16:31:34 ... suggested property will eventually become a VC. Why not just use a vc 16:31:39 ack JoeAndrieu 16:31:39 JoeAndrieu, you wanted to say its about definitively declaring the semantics of that VP 16:31:58 JoeAndrieu: separate VC need a way to bind to a VP 16:32:16 ... a way to say that this VC is specifically about a VP when it is presented 16:32:30 q+ to ask isn't "binding it to the VP" done already by being in the VP? 16:32:35 ... semantics should be part of a VP added when VP is created 16:32:37 ack brentz 16:32:37 brentz, you wanted to ask what about a new property who's value must eb a VC? 16:32:48 q+ 16:33:00 brentz: how terrible would it be to have property in VP. But specify that the value of that property would be a VC 16:33:12 ack manu 16:33:12 manu, you wanted to ask isn't "binding it to the VP" done already by being in the VP? 16:33:13 +1 to what brent said being an option, was having the same thought 16:33:13 ... so property in VP would be in form of a VC 16:33:30 manu: its a good though. I had similar. It is a way of doing this. Still thinking about it 16:33:48 ... raises Q of why we need an additional property in VP to do that 16:34:11 ... if the VC is in the VP then it is already bound to VP. Its all bound together 16:34:18 q+ how does the VC refer to the VP? 16:34:40 q+ to ask how does the VC refer to the VP? 16:34:51 q+ to say there really isn't a normatively described way to sign a VP (along with challenge response) do we need one? 16:34:54 ... Key thing is lets reuse primitives we already have 16:35:10 ack mprorock 16:35:13 ... Just need to address the binding concern 16:35:47 mprorock: Going the same direction as brent. Feels like a vocab problem 16:36:08 ... handling this in supply chain tracability. Extended the type on VC to TraceableVC. 16:36:15 ... this enables linking of VCs together 16:36:39 q+ to mention "protocol concerns" w/ signing a VP... 16:36:47 ... if the vocab and data models give us ability to define these things for use cases. Lets do that for those use cases 16:36:54 ... not reinvent the wheel 16:36:59 DIF also extends the RDF type for "VerifiablePresentation"... https://identity.foundation/presentation-exchange/#presentation-submission---verifiable-presentation-2 16:37:08 +1 to mprorock, we need to have a specific use case someone is building out for to apply this to 16:37:10 ... The tools we need exist 16:37:14 ack JoeAndrieu 16:37:14 JoeAndrieu, you wanted to ask how does the VC refer to the VP? 16:37:35 JoeAndrieu: I like idea of property whose values are credentials. Push back on making the VCs 16:37:44 ... want to avoid the need for multiple vcs 16:37:48 q+ 16:38:01 ... if we have multiple VCs in a presentation. Which VC defines the semantics of the presentation 16:38:12 ... trying to figure out and standardise that 16:38:22 ack brentz 16:38:22 brentz, you wanted to say there really isn't a normatively described way to sign a VP (along with challenge response) do we need one? 16:38:24 the presentation type does that, not the credentials in it 16:38:28 ... semantics of VP are about why is this thing being presented and by whom 16:38:37 VP has only 2 requirements... context and type. 16:38:46 brentz: don't have normatively defined way to sign and secure a VP. 16:39:03 ... Might this be a way to bind a VP to the presenter 16:39:05 ack manu 16:39:05 manu, you wanted to mention "protocol concerns" w/ signing a VP... 16:39:08 https://w3c.github.io/vc-data-model/#presentations-0 see the requirements. 16:39:23 https://w3c-ccg.github.io/vp-request-spec/#did-authentication 16:39:28 manu: data integrity work covers embedded proofs for presentations 16:39:40 ... also a VP request spec that talks to this 16:39:57 ... concern is that some people would think we are now defining protocols. Growth of scope 16:39:58 +1 manu 16:40:07 ... hard to talk about presentations without going into protocols 16:40:09 OIDC has ways of doing this as well, perhaps someone can cite those items for the minutes as well? 16:40:41 ... agree with mprorock. For us to say this is applicable and useful need to see usecases in the field and then standardise from that 16:40:50 q? 16:40:51 ... find comonalities instead of generalise too early 16:40:59 ack mprorock 16:41:11 mprorock: I agree with manu 16:41:11 For the minutes: https://openid.net/specs/openid-4-verifiable-presentations-1_0.html 16:41:24 q+ to say we have good use cases 16:41:39 ... when you start to get into practicalities, start going into protocols. 16:42:26 ... many of this issues we are correcting and improving in vc data model spec are down to how we thought something would/does work in the wild 16:42:47 ack JoeAndrieu 16:42:47 JoeAndrieu, you wanted to say we have good use cases 16:42:51 ... against adding additional complexity, rather that seeing what happens in implementations 16:43:02 JoeAndrieu: frustrated to deference to implementations 16:43:14 ... we have use cases in the use case document that have requirements from start 16:43:26 then define a vocab 16:43:28 ... The semantics of what the presentations means is the gap 16:43:38 q+ to explain the semantic requirements of a VP. 16:43:40 q+ 16:43:40 ... we have use cases that we haven't been able to adress currently because of this 16:43:50 ... Need to define semantics of a VP 16:43:55 ack Orie 16:43:55 Orie, you wanted to explain the semantic requirements of a VP. 16:44:06 Orie: joe is getting at 2 possible world views 16:44:56 ... 1 - purely the responsiblity of the data model. Almost what we have today. Clear that protocols will extend using @context and type to support there use cases 16:45:09 q+ 16:45:10 ... Because it landed like this in 1.1. people are defering to protocol 16:45:25 ... also concerned about getting into protocols in this WG 16:46:00 ... Feel protocols are adding many more requirements to VPs 16:46:03 ack mprorock 16:46:09 mkhraisha has joined #vcwg 16:46:11 ... concerned about VPs in there current form in the spec 16:46:32 mprorock: agree, there are things we need to improve about VPs in spec. Not sure this is one of them 16:46:36 Q+ to talk about issuer field being in a similar place 16:46:58 ... Deal with gov and regulatory folks. They are relatively happy with it the way it is 16:47:09 ... worried about getting pulled off on tangents 16:47:11 ack DavidC 16:47:23 DavidC: I support JoeAndrieu's view 16:47:39 q+ to get to a concrete proposal? can we extend VP first to see how this applies to the use cases? 16:47:42 ... This is about holder or presenter telling the verifier about the contents of the VP and how they should handle them 16:47:42 "type" 16:47:54 ... likely something about holder binding too. Proof of possession 16:48:12 ... Think we do need to broaden the data model for VPs in a standard way 16:48:26 ... if do it for your own applications then you are doing it in a non standard way 16:48:29 ack mkhraisha 16:48:29 mkhraisha, you wanted to talk about issuer field being in a similar place 16:48:30 Part of the confusion with VPs in the ecosystems that VPs are used for things other than presenting VCs 16:48:42 mkhraisha: Have similar problem with the issuer field 16:49:01 ... Not very clear to me who gets to define the values in the issuer field and what it looks like 16:49:11 ... don't want to derail this convo, but tangentially related 16:49:26 ... suggest extend VP the same way as the traceability vocab 16:49:27 ack manu 16:49:27 manu, you wanted to get to a concrete proposal? can we extend VP first to see how this applies to the use cases? 16:49:30 manu: agree with mkhraisha 16:49:43 ... would help me to understand concretely what the solns look like 16:50:08 ... we have extensibility model. Nothing to stop anyone creating an extension to solve use cases that JoeAndrieu is talking about 16:50:12 RDF is the extensibility model for Verifiable Presentations... context and type... that is it. 16:50:28 ... suggest we should do this to create something concrete we can look art 16:50:35 We've seen several use cases of vocabularies doing this today. 16:50:48 brentz: have a couple more minutes 16:50:58 (not too much less ambitious) 16:50:58 subtopic: https://github.com/w3c/vc-data-model/issues/895 16:50:59 ... going to spend this talking about ACDC 16:51:21 ... glief recently joined w3c and intends to join this WG 16:51:40 ... hopes to push for way to secure VCs using ACDC 16:51:47 ... should talk about that possibility 16:52:03 q+ to comment on the relevant of media types 16:52:11 q+ 16:52:22 +1 for a concrete proposal on how ACDC secures the VC Data Model 16:52:23 ... my perspective is we need a way for the current 1.1 VCDM to be secured using ACDC without requiring significant changes to the data model 16:52:27 q+ to advocate for concrete proposals 16:52:48 ... Have an idea how it could work, but not necessarily the best way 16:52:51 ack Orie 16:52:51 Orie, you wanted to comment on the relevant of media types 16:53:04 Orie: Been making progress together on this 16:53:14 ... looking at media types and the requirements associated with a media type 16:53:22 ... have one currently registered 16:53:56 +1 I think media type have a lot of promise for clarifying these issues 16:54:03 ... this might seem compicated but actually rel simple 16:54:19 ... I have prepared slides for f2f to go over media types 16:54:19 zakim, close the queue 16:54:19 ok, brentz, the speaker queue is closed 16:54:29 ... a media type is what we say a credential is. 16:54:44 ... It describes the requirements of a credential - for this working group 16:54:50 ack mprorock 16:55:04 s/gordian knot/gordian envelope/* :D 16:55:05 mprorock: would love to see concrete proposal 16:55:23 ... WG still struggling how to properly support the existing standards for signing data 16:55:33 I'm not in favor of the working group picking up more work, given the current progress and challenges. 16:55:39 ... stuff has been out and in broad usage for a long time. Well established standards 16:56:04 ... welcome a proposal, but also want to see it turn into a properly incubated spec elsewhere 16:56:07 +1 Mike 16:56:24 ... loathe to add more to our plate in this WH 16:56:29 ... WG 16:56:46 ... have plenty to be working on already in this WG 16:57:04 ack JoeAndrieu 16:57:04 JoeAndrieu, you wanted to advocate for concrete proposals 16:57:21 JoeAndrieu: agree with mprorock. Lot of approaches want to fit in with the VC work 16:57:26 ... concrete proposal welcome 16:57:37 ... not this working groups job to figure out how to support this work 16:57:46 +1 Joe 16:57:48 +1 Joe 16:57:51 +1 Joe 16:57:57 +1 Joe and mprorock 16:58:03 +1 Joe Mike 16:58:03 ... open to tweaking the data model, but need concrete proposal 16:58:26 brentz: agree currently don't have capacity 16:58:35 ... thanks all. See you in miami for those who can join 16:58:47 ... will be able to participate remotely too for those who can't 16:59:08 goal is to wrap 5 before (w3c wide) 16:59:22 zakim, who is here? 16:59:22 Present: brentz, cabernet, shigeya, DavidC, dlongley, TallTed, JoeAndrieu, Will, mprorock, Orie, manu, decentralgabe, Kerri_Lemoie, dlehn, mkhraisha, cel 16:59:25 On IRC I see andres, bumblefudge_, KDeanGS1, steve_mccown, Kerri_Lemoie, Orie, JoeAndrieu, mprorock, DavidC, Phil-ASU, Zakim, RRSAgent, brentz, TallTed, tzviya, dlehn, npd, 16:59:26 ... w3c_modbot, stenr_, cel[h], ounfacdo, dlongley, csarven, manu, shigeya, cel, Dongwoo, stonematt, bigbluehat, hadleybeeman, bumblefudge, cel[m], rhiaro 16:59:37 present+ shawnb 17:00:16 gkellogg has joined #vcwg 17:00:16 present+ dmitriz 17:00:26 present+ steve_mccown 17:00:34 present+ Phil-ASU 17:00:57 zakim, end the meeting 17:00:57 As of this point the attendees have been brentz, cabernet, shigeya, DavidC, dlongley, TallTed, JoeAndrieu, Will, mprorock, Orie, manu, decentralgabe, Kerri_Lemoie, dlehn, 17:01:01 ... mkhraisha, cel, shawnb, dmitriz, steve_mccown, Phil-ASU 17:01:01 RRSAgent, please draft minutes 17:01:02 I have made the request to generate https://www.w3.org/2023/02/08-vcwg-minutes.html Zakim 17:01:10 I am happy to have been of service, brentz; please remember to excuse RRSAgent. Goodbye 17:01:10 Zakim has left #vcwg 17:02:18 rrsagent, bye 17:02:18 I see no action items