Re: VC HTTP API Endpoint Authz Needs (was: Re: Attempting to block work)

On 6/12/21 11:23 AM, Adrian Gropper wrote:
> As Justin phrased it in another thread, making delegation a SHOULD, would 
> satisfy the privacy concern.

Could you please provide concrete text around that SHOULD statement so the
group can consider it during an upcoming call?

For example, if we add this text to the specification, would it address your
objection?

Implementations SHOULD support authorization delegation. While this
specification does not define a single mechanism for doing so, technologies
such as GNAP and Authorization Capabilities can be used to provide this
functionality.

-- manu

-- 
Manu Sporny - https://www.linkedin.com/in/manusporny/
Founder/CEO - Digital Bazaar, Inc.
News: Digital Bazaar Announces New Case Studies (2021)
https://www.digitalbazaar.com/

Received on Sunday, 13 June 2021 21:11:05 UTC