Question concerning proof purpose in a VP

Hi,

We've been using a Verifiable Presentation to represent a public profile
<https://hackmd.io/qFuh5MvEQBmvH8xSKud-BA> of an organization. This VP is
basically prepared once and can be fetched by various verifiers. We used
the proof purpose "Authentication", because it is used for subject
authentication. However, it's not really used "for the purposes of an
authentication protocol" [1] I'd say, since you can get the VP from any
party and this is by design, because we think this profile could be on a
CDN for example.

In our use case the challenge/nonce in the proof does not make much sense,
but libraries do expect the challenge for this proof purpose which makes
sense in an authentication protocol.

So, my questions are:

   - Is the proof purpose "authentication" appropriate for this use case?
   - Should we just use a self-selected challenge like the current
   timestamp?

Thanks!

Best,
Dominic

[1] https://w3c-ccg.github.io/ld-proofs/#proof-purpose

Received on Tuesday, 4 May 2021 06:16:44 UTC