Re: public key in a verifiable credential

On Thu, Apr 1, 2021 at 9:09 AM David Chadwick <D.W.Chadwick@kent.ac.uk>
wrote:

> By  Oauth "client" key you actually mean the subject's (in VC terminology)
> public key. Thus the subject ID is the natural place to put this. Using a
> DID as the subject's ID is either a direct or indirect way of referencing
> the subject's public key. So all VCs do this.
>

There are many reasons why you would like an authorization certificate to
be issued to a one-off public key.  Using the term "client key" doesn't
preclude that but does get people thinking you are referring to the
client's one and only key.  The same applies to using a DID.  You can
create a DID on the fly, but most people don't think that way.

--------------
Alan Karp

>