Proof of possession

• From: David Chadwick <d.w.chadwick@kent.ac.uk>
• Date: Tue, 14 Jun 2016 08:13:36 +0100
• To: W3C Credentials Community Group <public-credentials@w3.org>
• Message-ID: <4a705b98-db65-eaac-ed33-5b7413d05944@kent.ac.uk>

Having read the latest architecture document

http://w3c.github.io/webpayments-ig/VCTF/architecture/v4/

I note that there is no explicit mention of proof of possession (PoP).

Is this because the group has not discussed this topic, or has already
decided to recommend or prohibit the use of

bearer tokens,
public keys of subjects, or
subject identifiers

in this respect.

I tend to get the impression that subject identifiers seem to be the
implicit way of providing PoP. Is this correct?

regards

David

Received on Tuesday, 14 June 2016 07:13:56 UTC