Re: VC HTTP API Endpoint Authz Needs (was: Re: Attempting to block work)

On Sun, Jun 13, 2021 at 4:46 PM Adrian Gropper <agropper@healthurl.com>
wrote:

> No. As I understood Justin's SHOULD, it would require that test suites
> include delegation.  "While this specification does not define..." doesn't
> sound to me like a SHOULD.
>

I believe delegation must be a MUST.

--------------
Alan Karp


On Sun, Jun 13, 2021 at 4:46 PM Adrian Gropper <agropper@healthurl.com>
wrote:

> No. As I understood Justin's SHOULD, it would require that test suites
> include delegation.  "While this specification does not define..." doesn't
> sound to me like a SHOULD.
>
> - Adrian
>
> On Sun, Jun 13, 2021 at 5:14 PM Manu Sporny <msporny@digitalbazaar.com>
> wrote:
>
>> On 6/12/21 11:23 AM, Adrian Gropper wrote:
>> > As Justin phrased it in another thread, making delegation a SHOULD,
>> would
>> > satisfy the privacy concern.
>>
>> Could you please provide concrete text around that SHOULD statement so the
>> group can consider it during an upcoming call?
>>
>> For example, if we add this text to the specification, would it address
>> your
>> objection?
>>
>> Implementations SHOULD support authorization delegation. While this
>> specification does not define a single mechanism for doing so,
>> technologies
>> such as GNAP and Authorization Capabilities can be used to provide this
>> functionality.
>>
>> -- manu
>>
>> --
>> Manu Sporny - https://www.linkedin.com/in/manusporny/
>> Founder/CEO - Digital Bazaar, Inc.
>> News: Digital Bazaar Announces New Case Studies (2021)
>> https://www.digitalbazaar.com/
>>
>>
>>

Received on Tuesday, 15 June 2021 18:53:24 UTC