- From: Orie Steele <orie@transmute.industries>
- Date: Sat, 21 Aug 2021 15:13:58 -0500
- To: Manu Sporny <msporny@digitalbazaar.com>
- Cc: "W3C Credentials CG (Public List)" <public-credentials@w3.org>
- Message-ID: <CAN8C-_L6p2Jdv4cMbgxtJ7Ug0799-4a-0DjU93oBU598o-Aqog@mail.gmail.com>
I support the following resolutions: One of the authorization mechanisms defined for the VC-HTTP-API MUST be OAuth 2 Bearer tokens. How a VC HTTP API server validates an authorization token is out of scope. One of the authorization protocols that will be defined for use in the VC-HTTP-API MUST be OAuth 2 Client Credentials. I object to this resolutions because it is not clear: The VC HTTP API work item group will separate GNAP from OAuth2 until it is clear how much extra work GNAP would add within the scope of the specification. I propose a new (separate) document be created for this purpose, and for that document to be discussed on dedicated (separate) calls. OS On Sat, Aug 21, 2021 at 2:49 PM Manu Sporny <msporny@digitalbazaar.com> wrote: > On 8/21/21 3:25 PM, Orie Steele wrote: > > I would be happy to have the chairs overrule either side of the argument > > at this point. > > IIUC, that's not going to happen at this point (which is the right call, > IMHO): > > https://lists.w3.org/Archives/Public/public-credentials/2021Aug/0266.html > > I believe the CCG Chairs have been very clear that they're expecting the VC > HTTP API Editors to: > > 1. Strike the GNAP-KBAT resolution. > > 2. If there are further objections on the other > resolutions, work it out in the VC HTTP API group using > the new process, recording a decision with dissent if > necessary. > > 3. If there is dissent, escalate using the new process > for a final decision. > > Chairs, please correct me if I got any of that wrong. > > > As Adrian points out, there was not unanimous consensus on them. > > Unanimity isn't required for consensus: > > https://www.w3.org/2020/Process-20200915/#def-Consensus > https://www.w3.org/2020/Process-20200915/#def-Unanimity > > That's not the question at hand. The question is -- who is raising a formal > objection to which proposals? There were four proposals left, Adrian is > just > objecting to two of them. Which ones are you objecting to, if any? > > Orie, please respond to this: > > https://lists.w3.org/Archives/Public/public-credentials/2021Aug/0299.html > > ... and I would love to hear your thoughts on this as a path forward: > > https://lists.w3.org/Archives/Public/public-credentials/2021Aug/0300.html > > -- manu > > -- > Manu Sporny - https://www.linkedin.com/in/manusporny/ > Founder/CEO - Digital Bazaar, Inc. > News: Digital Bazaar Announces New Case Studies (2021) > https://www.digitalbazaar.com/ > > > -- *ORIE STEELE* Chief Technical Officer www.transmute.industries <https://www.transmute.industries>
Received on Saturday, 21 August 2021 20:15:23 UTC