14:52:41 RRSAgent has joined #vcwg 14:52:45 logging to https://www.w3.org/2024/09/25-vcwg-irc 14:52:45 RRSAgent, do not leave 14:52:46 RRSAgent, make logs public 14:52:47 Meeting: Expanding Verifiable Credentials: Future Standards and Innovations 14:52:47 Chair: mandyvenables, Wesley Smith 14:52:47 Agenda: https://github.com/w3c/tpac2024-breakouts/issues/37 14:52:47 Zakim has joined #vcwg 14:52:48 Zakim, clear agenda 14:52:48 agenda cleared 14:52:48 Zakim, agenda+ Pick a scribe 14:52:50 agendum 1 added 14:52:50 Zakim, agenda+ Reminders: code of conduct, health policies, recorded session policy 14:52:50 agendum 2 added 14:52:51 Zakim, agenda+ Goal of this session 14:52:52 agendum 3 added 14:52:52 Zakim, agenda+ Discussion 14:52:52 agendum 4 added 14:52:52 Zakim, agenda+ Next steps / where discussion continues 14:52:53 agendum 5 added 14:52:53 tpac-breakout-bot has left #vcwg 14:53:00 mandyv has joined #vcwg 14:59:12 manu_ has joined #vcwg 15:02:18 DavidC has joined #vcwg 15:02:32 wes-smith has joined #vcwg 15:02:32 present+ 15:03:11 present+ 15:03:27 Meeting: Breakout: Expanding Verifiable Credentials: Future Standards and Innovations 15:03:46 Does anyone have the Zoom link please for this meeting 15:05:26 thanks. I never got a TPAC message even though I registered for remote participation 15:05:45 Here's the Zoom link: https://www.w3.org/events/meetings/76e1bb63-3f4d-43a9-b4c9-41cb403aa87c/ 15:07:05 GregB has joined #vcwg 15:13:19 bigbluehat has joined #vcwg 15:13:31 present+ 15:20:25 gkellogg has joined #vcwg 15:22:21 manu_ thanks for the link. I have now registered at the W3C site but not got the Zoom link for the meeting yet 15:23:20 https://w3c.zoom.us/j/89520587850?pwd=LYfyjRztRrzY2A8i9SBftY7GYnbyiN.1 15:24:17 bigbluehat has changed the topic to: Breakout: Expanding Verifiable Credentials: Future Standards and Innovations - Manhattan - 08:30-09:30 https://w3c.zoom.us/j/89520587850?pwd=LYfyjRztRrzY2A8i9SBftY7GYnbyiN.1 15:24:43 shigeya has joined #vcwg 15:27:12 bigbluehat has changed the topic to: Breakout: Expanding Verifiable Credentials: Future Standards and Innovations - Manhattan - 08:30-09:30 15:30:52 TallTed has joined #vcwg 15:31:48 Isaac has joined #vcwg 15:31:51 gkellogg has joined #vcwg 15:32:29 thankyou manu_ 15:33:00 Geun-Hyung has joined #vcwg 15:33:12 present+ 15:33:36 SinYong has joined #VCWG 15:33:39 RYKay has joined #vcwg 15:34:09 present+ 15:34:11 scribe+ 15:34:19 dezell has joined #vcwg 15:34:20 KevinDean has joined #vcwg 15:34:25 present+ 15:34:28 rigo has joined #vcwg 15:34:30 wes-smith: I'm Wes Smith, presenting with Mandy from Digital Bazaar. 15:34:33 https://digitalbazaar.github.io/w3c-tpac-2024-presentations/future-vc-standards/Overview.html#s4-2 15:34:46 ... let's do a round of introductions 15:35:06 JennieM has joined #vcwg 15:35:12 gkellogg has joined #vcwg 15:35:43 reillyg has joined #vcwg 15:35:46 present+ 15:36:24 ErikAnderson has joined #vcwg 15:36:31 Greg Bernstein: Invited expert, co-author cryptosuite specifications, author of test vectors, also working on BBS at IETF. 15:36:36 presentation Rigo Wenning: W3C Legal counsel, contact person in Brussels, also doing research and development in the area of Digital Product passports 15:36:36 present+ 15:36:50 bigbluehat: Benjamin Young, Digital Bazaar, Inc. 15:36:51 HennaK has joined #VCWG 15:36:55 Jennie Meier, Digital Contract Design 15:37:17 ericaconnell has joined #Vcwg 15:37:29 Hello all, Kay - Infocomm Media Development Authority of Singapore, Observing 15:37:54 Erica Connell with Legendary Requirements 15:39:43 wes-smith: thanks for the intros! 15:39:56 ... please remember to be nice and follow the code of conduct. 15:40:10 ... we're discussing what might go into the next VCWG charter 15:40:22 ... there's a good deal of things being explored currently 15:40:42 ... we have 3 main categories: features, protocols, and applications of VCs 15:40:52 ... in features, we're looking at renderMethod and others 15:41:04 ... in protocols, we'll look at VC API and others 15:41:05 ericaconnell has joined #Vcwg 15:41:20 we have lost the voice 15:43:16 SinYong has joined #VCWG 15:43:33 phila has joined #vcwg 15:43:38 Gerhard9 has joined #vcwg 15:44:20 wes-smith: and...we're back. over to you, Mandy 15:44:33 Mandy: the screen is delayed for those here in the room--apoloies 15:44:38 ... First up, renderMethod 15:44:53 ... this allows issuers to provide displays of the credenital 15:45:03 s/credenital/credentials 15:45:10 Przemek has joined #vcwg 15:45:27 ... the community is experimenting with SVG, PDF, and others 15:45:28 ... Singapore is exploring OpenAttestation 15:45:43 ... there is an SVG render method implementation in the VC Playground 15:45:55 ... here's an example of a driver's license 15:45:59 q+ 15:46:02 ... it can also be seen on the VC Playground 15:46:18 Network issues, sorry folks, the Zoom setup in the room keeps dropping 15:46:20 OpenAttestation is in production since 2018 15:46:44 SVG render method code of the Utopia DL: https://github.com/credential-handler/vc-examples/tree/main/credentials/utopia-dl 15:46:46 rrsagent, pointer? 15:46:46 See https://www.w3.org/2024/09/25-vcwg-irc#T15-46-46 15:46:46 Mandy: next is confidenceMethod 15:47:02 ... this will help in confirming that the holder is the holder 15:47:18 ... this can use hardware keys and unlink-able signatures 15:47:24 ... here's another example 15:47:39 ... it supports multiple methods 15:47:47 ... back to wes-smith 15:48:03 wes-smith: the timeline for delivery of these range 15:48:16 ... there are current implementations, but the specs are mostly in progress 15:48:26 ... Unlinkable ECDSA is up next 15:49:02 ... traditional ECDSA is strongly linkable 15:49:35 ... but ECDSA is FIPS compliant, so the hope is to stick with ECDSA for it's various values--like that one--but add unlinkability 15:49:40 ... Next up is protocols 15:49:55 ... The VC API is an HTTP API for performing lifecycle management 15:50:03 ... issuance, verification etc. 15:50:28 ... it's most useful when you have several vendors, but wants a single interface to those various vendors 15:50:32 dmitriz has joined #vcwg 15:50:50 ... so it can support DIDCom, OID4, and others 15:51:08 ... VC API is already in production with TruAge, CA DMV, and others 15:51:17 ... and in the W3C test suites 15:51:31 present+ 15:51:45 Mandy: Next, we have Wireless VC sharing over Bluetooth and NFC 15:52:25 ... we're currently targeting First Responder scenarios, but it could also be used at border crossing and even retail for age verification and the like 15:53:03 ... there is a demo of this available...but the room is broken 15:53:11 ... sorry for the trouble folks on Zoom... 15:53:22 ... there is a video of VCs over NFCs 15:53:32 ... one phone has the wallet, the other has the verifier 15:53:54 ... you tap the two phones together and the verifier phone shows successful confirmation/verification 15:55:06 wes-smith: VC Barcodes 15:55:16 ... these are about physical credentials built from VCs 15:55:51 ... we encode VCs into barcode and a new cryptosuite 15:56:07 ... it includes data for the barcode and the visually readable content from the physical card 15:56:36 ... so on a driver's license, we sign the PDF417 MRZ and sign the human readable info as well 15:56:46 ... there are multiple implementations in progress 15:56:58 ... if you're interested, we'd love to have your help exploring this work 15:57:10 ... we're exploring it with the CA DMV and others 15:57:36 ... here's the Utopia DL again showing the added VC barcode as a PDF417 15:57:56 ... and below that is the Utopia Employment Authorization using a QR code 15:58:10 ... Next, we have the Citizenship Vocabulary 15:58:32 ... this vocab provides terms for governments related to citizenship status 15:59:03 ... Another vocab is related to Driver's Licenses. This one is already in use in the CA DMV 15:59:25 ... Lastly is one for Vehicle Titles...with a deployment in progress for CA DMV 15:59:27 ericaconnell has joined #Vcwg 15:59:51 ... in summary, we're hopeful these will be included into the next VC recharter 16:00:06 q? 16:00:24 ... in the meantime, we'd love to help what other things may be of interest to the room for inclusion in a future recharter 16:00:25 q+ to ask about accessibility overlaps. 16:00:43 DavidC: is it better to say how the VC be displayed via protocol? or in the VC itself? 16:00:57 ... the OID4VCI group is putting it into the protocol vs. in the VC itself 16:01:34 ... we also have a delayed term for ??? which we hoped to do next, will that make it in? 16:02:01 wes-smith: could you say more about the protocol based approach? 16:02:21 DavidC: essentially, it could be provided at various points in the transaction 16:02:32 q+ to note that putting it in VC makes the render mechanism portable. 16:02:36 q+ 16:02:40 ... it's more of a headache to see these other standards bodies choosing to do it differently 16:02:44 ack DavidC 16:02:47 ack manu_ 16:02:48 manu_, you wanted to ask about accessibility overlaps. and to note that putting it in VC makes the render mechanism portable. 16:03:01 ack DavidC 16:03:05 manu_: when we were looking at renderMethod, we did look at doing it via the protocol 16:03:29 ... big issue is if the protocol access is unavailable for a time, you won't be able to display the credential 16:03:51 ... so no offline support for example and even online it becomes protocol centric 16:04:00 ... so it can't support Bluetooth, NFC, etc. 16:04:12 q+ 16:04:19 ... but by putting it into the VC, we mode the display with the VC over any protocol 16:04:45 manu_: but, I mainly got on the queue to talk accessibility 16:04:55 ... we have a few opportunities over the next couple of years 16:05:01 ... wes-smith covered some vocabs 16:05:12 ... we could start talking about A11Y profiles of things 16:05:31 ... one class of work might be talking about what's needed in VCs to support A11Y 16:06:06 ... getting rid of captcha, supporting font and color preferences, we'd also need a good bit of help around providing auditory or haptic support via renderMethod 16:06:49 ... of those things, which do you feel are the most important? 16:07:19 Roy has joined #vcwg 16:07:24 ???: one big thing is about minimizing effort for the person using the credential 16:07:32 RRSAgent, make minutes 16:07:33 I have made the request to generate https://www.w3.org/2024/09/25-vcwg-minutes.html Roy 16:07:42 ... the other is around disclosure and not oversharing things like personal capabilities 16:07:53 ... because it risks exposing the user to prejudice 16:08:00 ... we don't know how to crack that nut 16:08:05 HennaK has joined #VCWG 16:08:06 ... we share a good deal of things in common 16:08:23 ... if we're honest about our abilities, we can share them gradually rather than all at once 16:09:01 ... in terms of what to support, we'd love to see support for as many mechanisms as possible: audio, visual, haptic, etc. 16:09:14 q+ 16:09:21 ... everyone is just a "TAB"--Temporarily Able Bodied 16:09:32 ... so invoking via circumstance is probably where the win is 16:09:35 ack SinYong 16:09:53 SinYong: renderMethod is very important to us 16:10:03 ... we're doing B2B with a long chain of intermediaries 16:10:19 ... organizations need time to process business update procedures 16:10:34 ... the QR code and renderMethod approach can help us provide paper VCs 16:10:50 ... these VCs travel through multiple hands before reaching the destination 16:11:16 ... digital VCs are harder because they don't move down the chain well 16:11:39 ... but this technology can reduce issues by enabling their use in paper processing scenarios 16:11:51 ack DavidC 16:11:59 ... so if someone in the middle prints it on paper, the process is not disrupted 16:12:12 s/???/Janina/ 16:12:16 DavidC: having the renderMethod in the VC makes them larger 16:12:36 ... and then if there's something that doesn't support any of this like mDL, then you can't do that 16:12:46 ... and if it's in the protocol, then you could go get it later 16:13:00 ... and the issuer could change it later without having to issue the VC again 16:13:08 ... so maybe there's no right answer 16:13:15 q? 16:13:22 q+ 16:13:24 ack phila 16:13:26 ... but maybe there's still a way to unify the approaches through some harmonized scheme 16:13:38 phila: I wanted to underscore what SinYong was saying 16:13:44 ... and I like what DavidC just said as well 16:14:06 ... often, parties are reluctant to do this digital thing and would rather just send you a PDF 16:14:45 ... plus the A11Y issue becomes more easily handled with some of these options and multilingual options 16:15:05 ... but those would probably be best handled in the protocol--at least if an unknown amount of options is provided 16:15:19 ... but putting it into the VC has value also 16:15:35 ... having flexibility here will be important 16:15:37 ack rigo 16:15:44 rigo: I wanted to put my lawyer hat on 16:15:56 ... the rendering isn't just about security, but about what's being rendered 16:16:10 ... we need to express that there are requirements on display like photo etc. 16:16:21 ... and some of that will need to be scannable even from paper 16:16:37 ... and the a11y requirements would also fall into this issue 16:16:39 q+ to reflect on physical paper processes being increasingly important. 16:16:43 ack manu_ 16:16:43 ... because there are requirements 16:16:43 manu_, you wanted to reflect on physical paper processes being increasingly important. 16:16:57 ... so renderMethods may be required for certain scenarios 16:17:02 ... not just optional display 16:17:06 manu_: so, paper VCs. 16:17:38 q+ 16:17:39 q+ 16:17:53 ... it's great that we have digital VCs of course, but there's clearly places where going in and out of paper and digital is clearly of interest to the room 16:18:08 ... and renderMethod also seems of interest with many more things to explore 16:18:23 ... so thank you all for highlighting these needs, so we can discuss them in the coming years 16:18:42 ... I'm also hearing more needs for VC API to prevent vendor lockin 16:18:46 ack Gerhard 16:19:05 Two questions: 16:19:05 * How does this work interact with https://digitalcredentials.dev/? 16:19:05 * Has there been any discussion about clarifying the 'intent' of the sharing details, that can prevent misuse/social engineering/fraud 16:19:09 Gerhard9: two things I wanted to share 16:19:22 ... I saw the Digital Credentials API demo earlier at TPAC 16:19:40 ... I'm perhaps wondering where rendering might figure into that 16:19:46 ... I guess on the Wallet side of thing? 16:20:00 q+ to speak to overlap with Digital Credential API 16:20:07 ... how does the work in VC land and things like renderMethod interact with the WICG Digital Credential API? 16:20:24 ... and does the recharter need to explain that integration? 16:20:37 ... my next question, what if I want to apply for a social grant? 16:20:46 ... what if someone is trying to take over my account? 16:20:57 ... has there been thought given into an intent specification 16:21:13 q+ to say "intent to use" VC for verifier... "reason" 16:21:14 q+ to talk about usage control in the privacy area that could be transposed 16:21:37 Gerhard9: I think having some explanation of intent could be useful for why the credential is being requested 16:21:48 ack wes-smith 16:22:06 wes-smith: going back to paper-based processes 16:22:27 ... if you have a motivating use case for VC Barcodes, that's an early stage technology, so please please please come help us 16:22:36 ... so we can be sure it will be broad enough for what you need 16:22:42 ack manu_ 16:22:42 manu_, you wanted to speak to overlap with Digital Credential API and to say "intent to use" VC for verifier... "reason" 16:22:59 manu_: adding to that, the disability placard we've done with VCs also includes the VC Barcode 16:23:14 ... Gerhard9 responding to you, how much overlap with the VC API 16:23:21 ... there's hug overlap 16:23:44 s/the VC API/the Digital Credential API 16:24:04 s/hug/huge 16:24:08 ... it's supposed to be format and protocol agnostic, and if it stays that way then it can support everything you described potentially 16:24:27 ... we do have the `reason` field during a request, we know that's insufficient 16:24:39 q+ Janina 16:24:58 ... we are wanting more fields signed into requests and even supporting VCs stating intent and capabilities and features when making a request of what they are promising to do with that VC 16:25:10 ... so both of the things you mentioned are under active discussion 16:25:19 ack rigo 16:25:19 rigo, you wanted to talk about usage control in the privacy area that could be transposed 16:25:33 ... and your point about needing liaison with WICG should go into the new charter for sure. Thank you 16:25:51 rigo: so...pandora's box is opening with these reasons and intent needs... 16:26:06 ... if we are saying, here's my intention for using this VC 16:26:15 ... we also have usage control requirements 16:26:32 ... which is very common rule...except in the US...[laughs in the room] 16:26:49 ... this is something manu_ will like because it really requires the use of Linked Data 16:27:05 ... because there are so many potential parties wanting to express things uniquely 16:27:08 ack Janina 16:27:18 ... and RDF is really the only way to do that well currently 16:27:48 Janina: there are also relationships to be considered in the use of VCs especially around intent 16:28:16 ... things like delegation and surrogate support -- power of attorney, etc. 16:28:38 ... questions around renderMethod get interesting when coupled with requirements 16:28:41 q+ 16:28:46 q- 16:28:58 ... because requiring the existence of a thing may not explain what is actually encoded in the thing 16:29:05 ErikAnderson has left #vcwg 16:29:07 wes-smith: excellent everyone! we're sadly out of time 16:29:13 ... thanks for coming! 16:29:16 Zakim, end meeting 16:29:16 As of this point the attendees have been DavidC, manu_, bigbluehat, Geun-Hyung, dezell, rigo, JennieM, phila 16:29:18 RRSAgent, please draft minutes 16:29:19 I have made the request to generate https://www.w3.org/2024/09/25-vcwg-minutes.html Zakim 16:29:25 I am happy to have been of service, bigbluehat; please remember to excuse RRSAgent. Goodbye 16:29:26 Zakim has left #vcwg 16:34:33 gkellogg has joined #vcwg 16:37:50 reillyg has left #vcwg 16:51:24 gkellogg has joined #vcwg 16:53:23 TallTed has joined #vcwg 16:55:51 steele has joined #vcwg 16:57:30 rigo has joined #vcwg 16:58:30 steele has joined #vcwg 16:59:06 dmitriz has joined #vcwg 17:01:44 gkellogg has joined #vcwg 17:03:25 Jem has joined #vcwg 17:05:45 steele has joined #vcwg 17:06:04 Roy has joined #vcwg 17:10:53 RYKay has joined #vcwg 17:27:42 gkellogg has joined #vcwg 17:34:07 steele has joined #vcwg 17:34:31 steele has joined #vcwg 17:51:48 steele has joined #vcwg 18:06:21 steele has joined #vcwg 18:07:25 dmitriz has joined #vcwg 18:07:50 rigo has joined #vcwg 18:08:12 gkellogg has joined #vcwg 18:09:49 gkellogg has left #vcwg 18:16:57 Roy has joined #vcwg 18:19:13 dezell has joined #vcwg 18:21:14 manu_ has joined #vcwg 18:49:12 manu_ has joined #vcwg 18:56:50 Roy has joined #vcwg 19:14:50 Roy has joined #vcwg 19:18:07 steele has joined #vcwg 19:21:20 gkellogg has joined #vcwg 19:29:51 steele has joined #vcwg 19:45:21 gkellogg has joined #vcwg 19:49:00 decentralgabe has joined #vcwg 20:08:03 gkellogg has joined #vcwg 20:10:03 gkellogg has joined #vcwg 20:12:54 steele has joined #vcwg 20:13:44 rigo has joined #vcwg 20:14:18 steele has joined #vcwg 20:16:32 Roy has joined #vcwg 20:18:56 rigo has left #vcwg 20:21:13 dmitriz has joined #vcwg 20:26:25 steele has joined #vcwg 20:34:53 Roy has joined #vcwg 20:49:02 steele has joined #vcwg 20:52:28 Roy has joined #vcwg 20:58:40 manu_ has joined #vcwg 21:06:39 dmitriz has joined #vcwg 21:09:00 steele has joined #vcwg 21:10:21 dmitriz has joined #vcwg 21:16:25 Roy has joined #vcwg 21:32:43 gkellogg has joined #vcwg 21:41:15 gkellogg has joined #vcwg 21:45:01 steele has joined #vcwg 21:46:27 steele has joined #vcwg 21:48:14 Roy has joined #vcwg 22:11:16 Roy has joined #vcwg 22:46:11 steele has joined #vcwg 22:48:44 steele has joined #vcwg 22:51:25 manu_ has joined #vcwg 22:51:35 dmitriz has joined #vcwg 22:52:11 Roy has joined #vcwg 22:58:36 gkellogg has joined #vcwg 22:59:42 gkellogg has joined #vcwg