- From: Brent Zundel <brent.zundel@evernym.com>
- Date: Mon, 23 Mar 2020 10:27:15 -0600
- To: Anil Lewis <anillewi@ca.ibm.com>
- Cc: "W3C Credentials CG (Public List)" <public-credentials@w3.org>
- Message-ID: <CAHR74YU+Kx9cKzGCKRMQLCjqmA-K8iOjzULMKQaU5kh2iWnX5w@mail.gmail.com>
This sounds less like a modeling problem and more like a trust framework problem. It seems like you're looking for some way to convey in the credential that the 3rd party is authorized by the original issuer to continue issuing credentials. Such a thing could be done using the evidence property. The reason others are bringing up delegation and credential chaining is because those mechanisms may allow for the delegated authority to be revoked, while simply providing evidence may be a vector for compromise. This is why I say it is a trust framework problem. What it comes down to is the verifier's trust model. On Mon, Mar 23, 2020, 10:12 Anil Lewis <anillewi@ca.ibm.com> wrote: > Hi Dmitri, > This use case is more for the clearing house of the worlds who issue > credentials on behalf of other universities and employers trusts these 3rd > parties. However, these 3rd parties when they issue the credential, want to > make sure that when they issue these credentials, the holder understands > that the 3rd party is doing it on behalf of the university and want that > information conveyed in the verifiable credential. How can this be modeled > in the current version of Verifiable credential. Note that this 3rd party > has no access to any of the keys of the original issuers so the signature > in the proof will belong to the 3rd party > > > > ------------------------------ > > *Anil Lewis * > Senior Managing Consultant > > > > > > > > > > > > > > > > > >
Attachments
- image/png attachment: Image.15849663741781.png
- image/png attachment: 02-Image.15849663741781.png
Received on Monday, 23 March 2020 16:27:40 UTC