W3C home > Mailing lists > Public > public-credentials@w3.org > May 2019

Re: committing fraud with credentials

From: Ian Smith <ian@vidicode.pro>
Date: Fri, 17 May 2019 12:16:15 -0600
Message-ID: <CAG=j93C=9QPP=yCBPOh+e2yMhe8HjF2gi1g7cg7V6Z+CKr76Ow@mail.gmail.com>
To: Kim Hamilton <kimdhamilton@gmail.com>
Cc: Daniel Hardman <daniel.hardman@evernym.com>, Joe Andrieu <joe@legreq.com>, Christopher Allen <ChristopherA@lifewithalacrity.com>, Philipp Schmidt <ps1@media.mit.edu>, Manu Sporny <msporny@digitalbazaar.com>, Credentials Community Group <public-credentials@w3.org>, credential-fraud-study@googlegroups.com
I have commented on the spreadsheet as Rorschach Rev, and I have been
contributing to various separate github issues as Rorschach. I would
also like to join this discussion and group.

Very relevant but not discussed thus far would be Shamir Secret
Sharing cryptography, and phone technology which can provide user
context. (I have a Samsung phone so my comments were specific, but I
am not affiliated with nor endorse any specific phone API or
manufacturer.)

On Wed, May 15, 2019 at 11:39 AM Kim Hamilton <kimdhamilton@gmail.com> wrote:
>
> The chairs can discuss when we meet later this week and propose some options.
>
> On Wed, May 15, 2019 at 8:32 AM Daniel Hardman <daniel.hardman@evernym.com> wrote:
>>
>> I agree that the topic is highly relevant to this group.
>>
>> I now have about a dozen non-CCG members who have asked to be involved, in addition to about 8-10 from the CCG. If we host the work as a formal CCG initiative, it would be convenient for CCG members. However, it would require those non-CCG people to become CCG members, and we would be co-mingling this topic with other CCG agenda items and handling it through the CCG's standard work management process.
>>
>> My own feeling is that it is probably worth it to move it into the CCG once the group has some true momentum and coherent things to share--but that bootstrapping it inside CCG is more trouble than it's worth in the very early stages. So what if we planned to bring it into the CCG in, say, 4-8 weeks, with the group invited to come to a CCG meeting to officially propose its adoption?
>>
>> I would be happy to turn the mailing list I created over to some CCG owner immediately so the CCG could do that management. Is there a logical person to do that? Or, would the CCG prefer to create the mailing list its own way? I don't think it should be co-equal with the normal CCG mailing list.
>>
>> --Daniel
>>
>> On Wed, May 15, 2019 at 9:20 AM Philipp Schmidt <ps1@media.mit.edu> wrote:
>>>>
>>>>
>>>>
>>>> Just my off the cuff $0.02... throwing it out there in case it resonates
>>>> w/ anyone else.
>>>
>>>
>>> +1
>>>
>>> Maybe use subject line tags to make filtering easier. I agree with Manu that the topic seems relevant.
>>>
>>> P
>>>
Received on Friday, 17 May 2019 18:16:48 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 19:18:49 UTC