Re: DID-Auth

On 02/06/2018 08:20 AM, Markus Sabadello wrote:
> But I wanted to quickly report that I was selected for this BCGov 
> opportunity to design and implement a DID authentication (DID-Auth)
> and authorization mechanism across 4 concrete scenarios:

Congratulations, Markus! That's great news!

> I would love this group's input on how to approach this in a way that
> is re-usable and complementary with other community efforts.

... and thank you for seeking input from the community in an attempt to
align what you create with what we're doing.

> I am aware there is already a lot of existing work from RWoT and
> other sources on DID/TLS, HTTP Signatures, Credentials Browser API,
> etc. that can be used.

Yes, let's please re-use all the work that has been done to date. For
example, HTTP Signatures were designed to be compatible with DID-based
authentication since we introduced the spec way back in 2013.

A tremendous amount of work has gone into the Credential Handler demo in
order to align it with browser initiatives from Google Chrome and others:

https://credential-repository.demo.digitalbazaar.com/

I'm concerned that deviating greatly from these directions will result
in derailing some of this work... or at least, if anyone plans to
deviate, please understand why the designs are as they are today and
make sure you're deviating for a very good reason.

That said... this is all great news Markus! Looking forward to
discussing it during the calls.

-- manu

-- 
Manu Sporny (skype: msporny, twitter: manusporny, G+: +Manu Sporny)
Founder/CEO - Digital Bazaar, Inc.
blog: The State of W3C Web Payments in 2017
http://manu.sporny.org/2017/w3c-web-payments/

Received on Tuesday, 6 February 2018 15:06:53 UTC