W3C home > Mailing lists > Public > public-credentials@w3.org > June 2021

Re: VC HTTP API Endpoint Authz Needs (was: Re: Attempting to block work)

From: Adrian Gropper <agropper@healthurl.com>
Date: Sun, 13 Jun 2021 19:41:02 -0400
Message-ID: <CANYRo8j5ZPaLv0LQqwEz63XO6f7yk7uTXwiSFwLFJn17d_x4aA@mail.gmail.com>
To: Manu Sporny <msporny@digitalbazaar.com>
Cc: W3C Credentials Community Group <public-credentials@w3.org>
No. As I understood Justin's SHOULD, it would require that test suites
include delegation.  "While this specification does not define..." doesn't
sound to me like a SHOULD.

- Adrian

On Sun, Jun 13, 2021 at 5:14 PM Manu Sporny <msporny@digitalbazaar.com>
wrote:

> On 6/12/21 11:23 AM, Adrian Gropper wrote:
> > As Justin phrased it in another thread, making delegation a SHOULD,
> would
> > satisfy the privacy concern.
>
> Could you please provide concrete text around that SHOULD statement so the
> group can consider it during an upcoming call?
>
> For example, if we add this text to the specification, would it address
> your
> objection?
>
> Implementations SHOULD support authorization delegation. While this
> specification does not define a single mechanism for doing so, technologies
> such as GNAP and Authorization Capabilities can be used to provide this
> functionality.
>
> -- manu
>
> --
> Manu Sporny - https://www.linkedin.com/in/manusporny/
> Founder/CEO - Digital Bazaar, Inc.
> News: Digital Bazaar Announces New Case Studies (2021)
> https://www.digitalbazaar.com/
>
>
>
Received on Sunday, 13 June 2021 23:41:29 UTC

This archive was generated by hypermail 2.4.0 : Sunday, 13 June 2021 23:41:36 UTC