Re: [MINUTES] W3C CCG Credentials CG Call - 2022-03-15

Not that I'm aware; it's based on leading bytes and doesn't have a scheme
registered in IANA (https://multiformats.io/multihash/)

On Tue, Aug 2, 2022, 7:50 AM Melvin Carvalho <melvincarvalho@gmail.com>
wrote:

> Quick question:
>
> Does "multhash" have its own URI scheme?
>
> On Mon, Apr 4, 2022 at 4:04 PM CCG Minutes Bot <minutes@w3c-ccg.org>
> wrote:
>
>> Thanks to Our Robot Overlords for scribing this week!
>>
>> The transcript for the call is now available here:
>>
>> https://w3c-ccg.github.io/meetings/2022-03-15/
>>
>> Full text of the discussion follows for W3C archival purposes.
>> Audio of the meeting is available at the following location:
>>
>> https://w3c-ccg.github.io/meetings/2022-03-15/audio.ogg
>>
>> ----------------------------------------------------------------
>> W3C CCG Weekly Teleconference Transcript for 2022-03-15
>>
>> Agenda:
>>
>> https://www.w3.org/Search/Mail/Public/advanced_search?hdr-1-name=subject&hdr-1-query=%5BAGENDA&period_month=Mar&period_year=2022&index-grp=Public__FULL&index-type=t&type-index=public-credentials&resultsperpage=20&sortby=date
>> Topics:
>>   1. Introductions and Reintroductions
>>   2. Announcements and Reminders
>>   3. CCG Work Items for promotion to VC WG
>> Organizer:
>>   Heather Vescent, Mike Prorock, Kimberly Linson
>> Scribe:
>>   Our Robot Overlords
>> Present:
>>   Kimberly Linson, Manu Sporny, Brian, Ryan Grant, Dmitri
>>   Zagidulin, Shawn Butterfield, Chris Abernethy (mesur.io), Markus
>>   Sabadello, Leo, Kerri Lemoie, Mike Prorock, Andy Miller, Orie
>>   Steele, Charles E. Lehner, Kaliya Young, Adrian Gropper, Brent
>>   Zundel, David I. Lehn, Kayode Ezike, Jeff Orgel, TallTed // Ted
>>   Thibodeau (he/him) (OpenLinkSw.com), Mahmoud Alkhraishi, Juan
>>   Caballero, Heather Vescent
>>
>> Our Robot Overlords are scribing.
>> Kimberly Linson:  Recording is on.
>> Kimberly Linson:   I just.
>> <kerri_lemoie> high five back!
>> Kimberly Linson:  High five to the air so we're all good okay so
>>   let's kind of walk through just our agenda review we're going to
>>   talk about the will go through sort of our housekeeping items and
>>   then we're going to do our main topic today which is that man is
>>   going to frame the context for us around the new VC working group
>>   Charter and some of the work items that we have that are going to
>>   move or potentially move to.
>> Kimberly Linson:   To to that group.
>> Kimberly Linson:  Go ahead and run through our housekeeping
>>   stuff.
>> Kimberly Linson:  So first off anyone is welcome to participate
>>   in these calls however if you are wanting to make substantive
>>   contributions we really would invite you to join the ccg you have
>>   to do two things in order to to be a full contributor one is join
>>   the ccg the link to do that to have an account its free to anyone
>>   is in that link is in that.
>> Kimberly Linson:  Into that I sent.
>> Kimberly Linson:  That's step one step two is to sign the
>>   community contributor license agreement and the link to that is
>>   also in in the agenda so I would definitely if you have not
>>   already done that please do then just a couple of things about
>>   how to participate in the call first of all you're in jitsi which
>>   means that you've done step one and if you have audio issues or
>>   something doesn't seem to be quiet.
>> Kimberly Linson:  Right we do know that.
>> Kimberly Linson:  They're sort of.
>> Kimberly Linson:  Be sometimes be some issues in the system
>>   couple workarounds or one too just refresh to is to try a
>>   different browser and know that that's worked for me on a couple
>>   of different occasions to just switch over to Safari the minutes
>>   and audio are of everything that's said on this call are recorded
>>   and archived and they are also that link to that archive is also
>>   in the agenda and so you can go there to look at those.
>> Kimberly Linson:   We use iirc to.
>> Kimberly Linson:  Jurors during the call as well as to take
>>   minutes we have this awesome CG bought that you can see that is
>>   transcribing and recording everything so hopefully we won't need
>>   a scribe but just to give your give you a few little tips on how
>>   to to use the are see if you aren't familiar with it one is it if
>>   you have something you want to say just add yourself to the queue
>>   by typing q+ if you change your mind you can pick you -.
>> Kimberly Linson:   If you see something in the transcription that
>>   the CG Bot got wrong.
>> Kimberly Linson:  Our that the CG bought got wrong then you can
>>   do s: / whatever was incorrect Bob / what's correct Robert and so
>>   you can fix anything and I've actually asked that as an entire
>>   Community we do that and thanks man you for putting that in there
>>   yes so so I'd asked us all to kind of keep an eye especially on
>>   the things that you say and make sure that that.
>> Kimberly Linson:   It is represented correctly.
>> Kimberly Linson:  And let's see so now I think we're too we'll
>>   skip the Scribe selection I don't think we need that because
>>   hopefully the CG bot will do that for us and we get to do
>>   introductions do we have anybody new to the community or who
>>   would like to hasn't been here for a while who'd like to
>>   reintroduce themselves.
>> Kimberly Linson:   We'd love to welcome you.
>>
>> Topic: Introductions and Reintroductions
>>
>> Kimberly Linson:  And is a former educator I know to give that a
>>   very long pause but I don't see anybody and I recognize most of
>>   the names here so I'll go ahead and move to announcements and
>>   reminders.
>> Kimberly Linson:  Anybody have an announcement for us.
>>
>> Topic: Announcements and Reminders
>>
>> Manu Sporny: https://w3c.github.io/vc-wg-charter/
>> Manu Sporny:  Yeah just two things the first one is reminder this
>>   is the weekly reminder that the verifiable credentials working
>>   group Charter is under active development please read it provide
>>   some input we're going to be talking about it today but things
>>   really do seem to be wrapping up on it so please kind of read it
>>   as it stands right now and you know.
>> Manu Sporny:  You're running out of time the chart looks is
>>   starting to look pretty good right now so I don't think this
>>   community would have any objections with it but just a reminder
>>   that that's happening the other kind of news is that it looks
>>   like the did formal objections or moving forward a bit with the
>>   director can't say much more than that but looks like there's
>>   some movement there so that's good and that's it.
>> Kimberly Linson:  Great thank you any other announcements
>>   reminders.
>> Manu Sporny: https://w3c.github.io/vc-wg-charter/
>> Kimberly Linson:  All right I checked and it doesn't seem like we
>>   have any action items that we need to talk about but if somebody
>>   has somebody thing that they want to bring up there now would be
>>   the time to do so.
>>
>> Topic: CCG Work Items for promotion to VC WG
>>
>> Kimberly Linson:  Okay great then let's get into to the main
>>   topic for for today as I said at the beginning this was a good
>>   topic for me to have as my first one because it really gave me
>>   the opportunity to dive in and see what it is that we're doing
>>   and I have to save it as a community group it is amazing the
>>   amount of work and expertise that were contributing and I know
>>   you all know that in parallel to our work the the.
>> Kimberly Linson:  Is also doing their work and so today's topic
>>   is really to as man you said think about those items that we've
>>   been working on and do they need to be promoted to to the formal
>>   BC working group so I'm going to go ahead and turn it over to
>>   Manu to walk us through the context and then we can have a good
>>   discussion around that after he's finished.
>> Manu Sporny:  Okay thanks Kimberly Bryant I don't know if you
>>   would also I'm sorry to put you on the spot print but I don't
>>   know if you would like to say some things to kind of start at
>>   Brent's Brent's one of the co-chairs of the verifiable
>>   credentials working group or if you want me to just dive into
>>   things.
>> Brent Zundel:  Manu I will certainly leave it to you to dive into
>>   things and I'm happy to chime in if folks want me to talk.
>> Manu Sporny: https://w3c.github.io/vc-wg-charter/
>> Manu Sporny:  Okay awesome thanks Brent okay so Brent is our
>>   fearless leader in the verifiable credentials working group and
>>   has been a chair therefore since the since the dawn of time for a
>>   long time and currently as I mentioned we've been working on this
>>   verifiable credentials working group Charter I'm going to go
>>   ahead and share going to tempt fate and share my screen.
>> Manu Sporny:  Sorry to do this to you on your first first time
>>   Kimberly butt.
>> Kimberly Linson:  That's okay you said if you said if it was if
>>   it got broken to just call on you so since you're in charge there
>>   you go you can break it and then fix it.
>> Manu Sporny:  Exactly okay so here's the charter so the
>>   verifiable credentials working group Charter and there's a
>>   portion of the charter that talks about the group's deliverables
>>   and typically this group The credentials community group has been
>>   a feeder of incubated specifications to the verifiable credential
>>   working group now this not the only path.
>> Manu Sporny:   Earth to the VC.
>> Manu Sporny:  G but it is a path and we have a number of
>>   community work items that have found themselves in the verifiable
>>   credentials working group Charter so there's a part of the
>>   process here where this community hands are work items over to
>>   the official working group and there is a process there's a
>>   community group process for that you publish what I think is
>>   called a final community group report.
>> Manu Sporny:  People in this community then if you worked on it
>>   make concrete IP our commitments basically is asserting that yes
>>   I worked on it no I don't know about any patents or if I do know
>>   about patents I will bring them to light I will let everyone know
>>   about it in in in in most cases contribute the patents for the
>>   specific purposes of the specification so that process so if you.
>> Manu Sporny:   Dissipated in any of these items there's.
>> Manu Sporny:  Asian that you're going to make that patent
>>   commitment on the specification so what items are in this group
>>   that are moving over currently we have listed the data Integrity
>>   specification Jason Webb signature 2020 Edwards curve signature
>>   for David data Integrity the same thing for the nist.
>> Manu Sporny:   T curve.
>> Manu Sporny:  Thing for the Bitcoin also known as the Cobell its
>>   curves theory mises that stuff as well and then we have
>>   conditional normative specifications that basically say if these
>>   things progress in some groups outside of the group we will take
>>   the work up as well so there's the pgp crypto Suite which is
>>   currently in or he's repo here we've got BBS plus which.
>> Manu Sporny:   Which you know work is happening.
>> Manu Sporny:  At ietf in diff on that and we've got the jwp stuff
>>   where work is happening at diff in ITF on that so the the whole
>>   discussion today is really around like this section of the of the
>>   specification I'm sorry I forgot to mention the post Quantum
>>   crypto stuff as well that mic Pro Rock and in that groups working
>>   on so but but.
>> Manu Sporny:  Basically we're talking about this section.
>> <mprorock> * i feel slighted ;)
>> Manu Sporny:  Write all the all the stuff in here I sent out a
>>   kind of every year we present this roadmap about what the group
>>   is doing and this I tried to update it I'm sorry if I missed
>>   something there's a lot of stuff to keep track of I tried to
>>   include all the things this community has been working on since
>>   like you know 2010 ish.
>> Manu Sporny:   14 Ish all the way to present.
>> Manu Sporny:  A and then try to predict out that like 20:27 based
>>   on the stuff that we know this does not include work items that
>>   for example diff is working on it doesn't include work items that
>>   are happening at ietf unless they originated in the ccg so it's
>>   missing some things with the Hope here is that it gives everyone
>>   a pretty good idea of like the types of things we've worked on in
>>   the past and what we're getting ready to move over so.
>> Manu Sporny:   Cific Lee if we if we scroll down here.
>> Manu Sporny:  The red line is today so this is this is where we
>>   are today and if we scroll down here to the cryptography section
>>   right here so the cryptography section this is where we are today
>>   in each one of these items is an official work item in a official
>>   w3c working group so as you can see we are getting ready to hold
>>   like hand over a.
>> Manu Sporny:   A huge amount of.
>> Manu Sporny:  From this group to official working groups at w3c
>>   so that is like a huge success story I think they're not all
>>   going to the same working group this one here at the top actually
>>   you know what let me let me pause for a second I've kind of fire
>>   hose the group with information are there any questions at least
>>   at a high level about what we're talking about today or just
>>   general questions about the.
>> Manu Sporny:  Okay so that's either everyone understand well
>>   let's see where's the queue right so either everyone understands
>>   or we're all totally lost one of the do I'll keep going feel free
>>   to put yourself on the Queue if there's any any questions so
>>   they're really two working groups at w3c that ccg work is going.
>> Manu Sporny:   To the first world.
>> Manu Sporny:  In group is a very specialized working group to
>>   standardize this spec up here rdf data set canonicalization this
>>   spec has been incubated in this group and other groups for a
>>   decade now literally this work has been going on for a decade and
>>   it's finally moving over to an official working group with the
>>   time span of two years to standardize it the good news here is
>>   that this thing has been pretty settled for six years now.
>> Manu Sporny:   Now 7 years now but it.
>> Manu Sporny:  Goes to show you sometimes how long some of these
>>   things can take to actually get it into an official working group
>>   so rdf data set canonicalization is going into a working group
>>   called rdf data set canonicalization hashing working group at w3c
>>   that group will run in parallel with the re-chartered verifiable
>>   credentials 2.0 working group The VC 20 working group will build
>>   upon this work and and.
>> Manu Sporny:   Their work elsewhere.
>> Manu Sporny:  Um and it will be taking all of these
>>   specifications in right so things like data Integrity multi base
>>   multi hash and multi key this one's a little gray area right now
>>   but other things like Jason Webb signature the Edwards curve
>>   crypto sweet the nist crypto sweet the Cobell it's Bitcoin
>>   ethereum crypto sweet.
>> Manu Sporny:  All you know fairly well formed and inspects that
>>   can be pulled in the BBS Plus work needs more work at ietf but
>>   we've been able to basically phrase the charter so I'm going to
>>   switch back over to the Charter we've been able to phrase the
>>   charter in the in this kind of conditional normative
>>   specification term so basically this means that.
>> Manu Sporny:  Plan to publish official standards for these
>>   Technologies if the base work for these Technologies are
>>   completed before the working group ends so there's base
>>   technology for BBS plus that has to happen at ITF and there's
>>   base technology for J WP s that has to happen at ietf before the
>>   verifiable credentials working group can take it over.
>> Manu Sporny:   Over so these things are.
>> Manu Sporny:  Like optional we may not get to them we really hope
>>   we get to them but it's totally dependent on groups that are kind
>>   of external to the VC WG to deliver on the things that they said
>>   they were going to deliver on okay so going back to kind of this
>>   diagram that's why BBS plus doesn't start for maybe another year
>>   in the group there's some pre-work there that needs to be done.
>> Manu Sporny:  Let me stop there to see if there any questions.
>> Kimberly Linson:  Well I was trying to keep question mark But I
>>   added myself to the queue so I will ask you so so the official
>>   Charter like how long of a period of time does that VC working
>>   group Charter span.
>> Manu Sporny:  Right great question so the charter span see oh wow
>>   they don't have it it's two years basically right in once we know
>>   the start date will will lock those time periods in there so at
>>   the top it's typically two years and they really don't like w3c
>>   members really don't like giving Charters more time than that
>>   they don't like work that doesn't complete in something concrete
>>   so we basically have.
>> Manu Sporny:   Two years.
>> Manu Sporny:  Extensions but and they're typically granted if
>>   they're reasonable but if you have like failed to produce
>>   something implementable at two years that you basically just acts
>>   the group they shut you down which is why it's so important that
>>   we go in with pre incubated work the other thing that's
>>   interesting to look at here from timeline is section 2 6 where it
>>   talks about like what happens a month after two months after five
>>   months after 6 months.
>> Manu Sporny:   After most w3c Charters have.
>> Manu Sporny:  Are and and language like f PW d means first public
>>   working draft CR means candidate recommendation like for
>>   implementation implementer should start implementing at that
>>   point and Rec means recommendation also known as kind of like an
>>   official global standard so that's the time frame two years and
>>   it's kind of broken down a bit in here and it's everyone that's
>>   been in a w3c working group can attest to this is largely.
>> Manu Sporny:   A work of fiction.
>> Manu Sporny:  Things don't always go according to plan but you
>>   know should give you a rough idea of what we intend to do.
>> Kimberly Linson:  Thanks Charles is on the queue.
>> Charles E. Lehner:  Hi can you hear me.
>> Charles E. Lehner:  Hi I was wondering about the IP our
>>   commitment process you mentioned how it works coming from with
>>   documents coming from ccg and I was wondering how it works if
>>   it's the same for the other potential documents coming from other
>>   organizations.
>> Manu Sporny:  That's a great question documents coming from other
>>   organizations that have their own IP are mode or tend to be very
>>   problematic in that it takes us a while to figure it out now if
>>   that organization has a w3c mode like for example diff does
>>   moving things overs typically much easier for the lawyers to
>>   reason their way through it so Charles was your question mostly
>>   about external documents coming in.
>> Charles E. Lehner:  Yeah about the conditional normative
>>   specification documents but.
>> Manu Sporny:  Okay okay that's a great question because these are
>>   there are two partners here this there's a two parts to the
>>   answer here right so the BBS plus crypto Suite is a ccg work item
>>   so at some point not now but maybe in a year maybe in six months
>>   this group will have to create a final community group report on
>>   the BBS plus specification and then hand it over to the be cwg.
>> Manu Sporny:   Ever the base.
>> Manu Sporny:  Primitives will be ITF work items so ietf doesn't
>>   hand that stuff over to w3c ITF just basically says we've got it
>>   we will standardize the base cryptographic Primitives and ITF in
>>   you ccwg in your crypto sweet can refer to our specs so in the VC
>>   w g what we would do if everything is in order at ITF the V CW G
>>   would start pointing normatively.
>> Manu Sporny:   Lie to the BBS.
>> Manu Sporny:  ITF specifications did that help Charles.
>> Manu Sporny:  The other part of that question which is also
>>   interesting that I don't think many of us have been through here
>>   is this whole concept of a final community group report in so if
>>   you'll notice on our community group webpage we have these final
>>   reports in like the vc10 use cases was one of those things the
>>   data model 10 was one of those things in the did Speck was one of
>>   those things there was.
>> Manu Sporny:   A point in time where we did.
>> Manu Sporny:  Doing today where we said okay we need to hand over
>>   a bunch of specs and the editors of those specs publish them as
>>   final reports in got licensing commitments on those final reports
>>   so if I go and I click on like the did licensing commitments it's
>>   takes a while to load because it's got a load all 460 people in
>>   the group but you'll see these commitments from the credentials
>>   community group on this did spec so you'll see you.
>> Manu Sporny:   Like Dan burn.
>> Manu Sporny:  Commitment reuven made a commitment Michael Zoo
>>   Pele I mean all these people that worked on the did spec made
>>   commitments right so all this yes stuff our commitments basically
>>   saying we are not withholding any kind of intellectual property
>>   or anything on the spec but if you go down far enough like there
>>   are a lot of people that that made commitments.
>> Manu Sporny:   A lot of people made commitments.
>> Manu Sporny:  You'll see that some people did not write and that
>>   might be because they didn't contribute anything to it it might
>>   be because they don't feel like what they did contribute you know
>>   would make a difference some of these people might not have been
>>   a part of the group at the time right so really what we're
>>   looking for are commitments from people that actually contributed
>>   material and specifically things that are substantive to the
>>   specification so.
>> Manu Sporny:   The editor.
>> Manu Sporny:  A document will put it out there and publish it and
>>   then we'll publish it as a final report and then we will ask the
>>   community hey we need you to you know make a commitment if you
>>   contributed anything make a commitment and the editors themselves
>>   will know like these five people absolutely definitely me need to
>>   make commitments or we need to know now that they're not going to
>>   make a commitment because then that that creates an air of you
>>   know.
>> Manu Sporny:   Auntie around IP are so if somebody.
>> Manu Sporny:  Substantive thing like a something fundamental and
>>   they're refusing to make and I pee our commitments then that's an
>>   immediate red flag that you know it's raised now that has never
>>   happened either that as far as I know in this group ever but what
>>   we are expecting here is that for this work.
>> Manu Sporny:   People we're.
>> Manu Sporny:  Publish F CG s is final community group
>>   specifications for these items and people are going to make those
>>   IP our commitments on these documents hopefully that made
>>   hopefully that made sense.
>> Kimberly Linson:  Thank you does anybody have any questions for
>>   me a new queue is currently empty.
>> Kimberly Linson:  All right man who are the things that we want
>>   to dive into on specifics or.
>> Mike Prorock: +1 That or dive on VC-API implications
>> Manu Sporny:  We might want to ask each of the editors where they
>>   think they are on prepping you know each document so we might
>>   want to dive into each one individually that's one thing we could
>>   do the other thing we could do is look at the rest of the road
>>   map I don't know if folks would be interested in doing that and
>>   asking questions about why things are staged in the way they are
>>   or there's X is missing.
>> Manu Sporny:   You know why is that.
>> Manu Sporny:  Where does it fit in here.
>> Dmitri Zagidulin: +1 To roadmap
>> Manu Sporny:  Either either you know we could we could go either
>>   way.
>> Kimberly Linson:  Mike just brought up a really good point that
>>   maybe we should discuss is the VC API work and maybe we can
>>   discuss that and then talk about the roadmap so that makes sense.
>> Manu Sporny:  Oh yeah plus one.
>> Kimberly Linson:  Mike do you want to jump in and give us kind of
>>   an overview of the.
>> Mike Prorock:  Yeah well like yeah sure and I guess really the
>>   thing that is a little bit concerning to me and I think we're
>>   making good progress now especially with some of the PRS that are
>>   in queue on VC API but there's kind of two things if that work
>>   moves over into the working group I think we should have it at a
>>   reasonable does not have to be perfect but a reasonable steady
>>   state.
>> Mike Prorock:  Which would mean.
>> Mike Prorock:  In the VC API work item we would want to kind of
>>   formalize and say Yep this is what we're considering in scope and
>>   we're just going to kind of lock this in a certain point and then
>>   re pick up work inside the working group but since that would be
>>   moving to a non-normative item that is the other question I have
>>   around kind of what are the implications of that.
>> Mike Prorock:   That could be detrimental.
>> Mike Prorock:  Normative item it may set up the path to a more
>>   normative item once we show people working on it so there's a
>>   variety of ways that could go strategically and politically and
>>   so that's kind of an open for I'd like man whose thoughts on that
>>   and then I think that might spur some interesting conversation
>>   there so.
>> Kimberly Linson:  Great guy had manna.
>> Manu Sporny:  Yeah I think that yeah Mike's totally right the
>>   this is like a very this is a super interesting what's the word
>>   conundrum that that were in with the VC API so so we've got
>>   multiple people implementing the VC API and I know the trace
>>   folks are doing it I know digital bazaars committed to it you
>>   know number of organizations committed to interrupt through the
>>   VC API but.
>> Manu Sporny:   There have been some.
>> Manu Sporny:  See members that have pushed really hard to keep
>>   protocol out of scope for the verifiable credentials working
>>   group so you will know that there is.
>> Manu Sporny:  Out of scope right normative specification of apis
>>   are protocols and we are expecting that if we try to put it in
>>   scope it would be challenged heavily if not formal objections so
>>   the what we've tried to do here is to basically say the group is
>>   going to work on a developer guide the VC to working group is
>>   going to work on a developer guide and there's going to be input
>>   to that one of them is the VC API.
>> Manu Sporny:   II just be Capi.
>> Manu Sporny:  Other ones can app like we want to be able to talk
>>   about protocols that are carrying verifiable credentials over
>>   them but we're not allowed to say anything normatively about
>>   those things so how are we you know how is this group going to
>>   feed VC API into the VC to working group The verifiable
>>   credential 20 working group.
>> Manu Sporny:   One option.
>> Manu Sporny:  When is we just handed over completely and it stops
>>   being a ccg work item and then it's up to the verifiable
>>   credentials working group to determine what what should happen to
>>   the VC API upside there is like hey it's in the group that's
>>   great but the only thing they can do is publish it as a note and
>>   one of the implications of that that Kyle did hartog brought up
>>   which I thought was a great point.
>> Manu Sporny:   Point is that because it's a note it.
>> Manu Sporny:  Kind of IPR protection whatsoever 0 IPR protection
>>   so people can start injecting all kinds of horrible proprietary
>>   patented stuff in there and there is no requirement to say
>>   anything about that now we know I think all of us don't think
>>   like that's going to happen but that is one of the concerns there
>>   so option one is give it completely over to the verifiable
>>   credential working group but all they can really do is work on it
>>   as kind of like a note a developer guide that kind of thing.
>> Manu Sporny:  Option two is that we keep it as a ccg work item
>>   and we continue to incubate it here it has IPR protection in this
>>   group and will continue to have IPR protection in the group and
>>   what we can do is hand over snapshots to the verifiable
>>   credentials to working group we can basically tell them hey can
>>   you snap shot this in they can publish it as a note and they can
>>   snapshot you know couple times throughout the year the benefit
>>   there is that it has IPR protection and we can continue to
>>   incubate it as kind of.
>> Manu Sporny:   A high priority item.
>> Manu Sporny:  So it'll get like the air it needs to breathe here
>>   and have protection while also signaling to the w3c membership
>>   that we do plan on doing protocols at some point like maybe not
>>   right now but maybe in the VC 30 working group the recharter we
>>   plan to put protocols in scope so that's option two option three
>>   is to just keep it in the ccg and keep working on it and it would
>>   be good you know I don't know.
>> Manu Sporny:   If there are other options too.
>> Manu Sporny:  Other options of the things that we could do with
>>   it or it would also be good to hear back like what do folks feel
>>   we should do with that item.
>> Manu Sporny:  Let me ask a more pointed question traceability
>>   folks what do you want to do with that item I mean you guys
>>   depend on it right.
>> Mike Prorock:  Yeah I mean I am honestly fine with it going in as
>>   a note on the w3c side one of the kind of bigger picture items
>>   that we have to balance as kind of the multiple aspects of
>>   traceability because a lot of digital traceability is also coming
>>   up and there seems to be a critical mass actually on the ietf
>>   side right with some working groups there and that's where.
>> Mike Prorock:   We have to still find out.
>> Mike Prorock:  Willing to be friendly to use of VCS and Ed's
>>   right in especially linked data usage and that's a bit of an
>>   unknown right now and that's kind of a high risk I don't know or
>>   eicu on the queue as well.
>> Orie Steele:  Yeah I agree with the what Mike said you know I
>>   think when we consider technologies that are related to
>>   verifiable credentials dids and the sort of basic cryptographic
>>   envelope formats like Jose Jose come to mind and I would want to
>>   make sure that I think you know just speaking frankly the
>>   verifiable credentials a.
>> Orie Steele:  P I work for her.
>> Orie Steele:  That's not the only thing that's important support
>>   for traditional Jose and cozy a is also really important
>>   especially for kids and and so I think.
>> Orie Steele:  My experience with the w3c you know especially
>>   after the did working group I'm not sure that the w3c is really
>>   the best place to do anything related to protocols I think I
>>   agree in large part with some of the positions that other w3c
>>   members have held that the w3c is not really great at developing
>>   protocols and in particular support for Jose and cozy which are.
>> Orie Steele:  Of users are actively contributing to and
>>   maintaining them at ietf I think there is a future where the VC
>>   apis that exist today might be better served becoming more of a
>>   dids plus Jose and cozy at ITF but that is the kind of thing that
>>   you know it's about going to where the contributors are and
>>   asking them how they want to see these Technologies working
>>   together.
>> Orie Steele:   And recognizing that.
>> <mprorock> it is really nebulous and makes me highly nervous
>> <mprorock> I don't think CCG helps it long term either
>> Orie Steele:  Not everyone wants to use the same tools to build
>>   their favorite sandcastles so I think the verifiable credentials
>>   API as a non normative item at the w3c obviously doesn't really
>>   do anything to secure its future anywhere like it could just
>>   become a non-normative item and then never be defined further
>>   could become a normatively defined API at W3 for support for the
>>   defined verifiable potential formats.
>> Orie Steele:   I think that's a best-case scenario but.
>> Orie Steele:  My experience over the last few years is that even
>>   when you plan for something like that you may not actually be in
>>   control of achieving it especially given the you know kinds of
>>   contributions we see the w3c standards so if it feels nebulous
>>   and scary the yeah that's kind of how I feel about it.
>> Kimberly Linson:  Go ahead manu.
>> Manu Sporny:  Yeah so I mean this is this is this is new to me
>>   and that does seem like a very big change in scope and Direction
>>   Ori.
>> <orie> there is OIDF as well, working on protcols related to this
>> Manu Sporny:  And so where it's so I haven't seen work like this
>>   done at ITF ever there's low-level protocol bits and bytes stuff
>>   that does happen at ITF but not application you know layer
>>   protocols like sip is an example HTTP an example but those are
>>   you know much more lower lower level than the VC API we're in the
>>   w3c has.
>> Manu Sporny:   Unlike application.
>> Manu Sporny:  Linked data platform you know they did you know
>>   protocol work there we're at ietf are both of you thinking the
>>   work would fit in like it would be a complete rewrite of the
>>   specification I think that's what I mean that's what I'm hearing
>>   is like hey let's not use verifiable credentials let's use
>>   something else and let's not do a w3c spec Let's do an ITF spec
>>   so it sounds to me like this is a totally different
>>   specification.
>> Manu Sporny:   And you guys talk.
>> Manu Sporny:  What where where did IETF with the work happen.
>> Orie Steele:  So I'm not saying any work what happened ietf I'm
>>   saying that ITF works on things that I care about deeply and if
>>   you look at you know the work on an app that's happening and ietf
>>   you can see that you know clearly ITF has ability to gather folks
>>   who are passionate about these issues and work on standards there
>>   I'm mostly saying that from a software supply chain or hardware
>>   supply chain use cases dids and VCS are.
>> Orie Steele:   Obviously an important part of that but I think
>>   also.
>> Orie Steele:  Port for existing cryptosystems like pgp Jose and
>>   cozy is an important part of that and bgp Jose and Jose have been
>>   defined at ITF so I'm mostly just saying that work will happen
>>   where people are and you know obviously the VC API is currently
>>   being incubated here in the w3c ccg and the plan is to work on it
>>   as a non normative note in the w3c verifiable credentials working
>>   group assuming the charter is approved.
>> Orie Steele:   It's all I can say about that as I.
>> Orie Steele:  I'm just noting that like there are also other
>>   things that are happening out in the ecosystem like now and the
>>   open ID connect verifiable presentation Flows at open ID
>>   foundation and you know I'm interested in contributing to these
>>   items as well so maybe really what I'm saying is that work
>>   happens outside of the ccg and w3c as well.
>> Kimberly Linson:  Thanks Orie,  Mike did you want to add some
>>   something to that.
>> Mike Prorock:  Yeah I mean I can add some color and then some
>>   concern I mean the I think a I think fundamentally having the VC
>>   API live as a were even traceability for that matter live as a
>>   long-term ccg non-normative items not going to be helpful to
>>   adoption right and that's that's concerning to me so we have to
>>   start thinking even if it's a way down the line where's this
>>   going to work in a graduate to in quotes right.
>> Mike Prorock:
>>
>> https://datatracker.ietf.org/doc/html/draft-birkholz-scitt-architecture-00.html
>> Mike Prorock:  The I think you know Trends I am seeing in ietf
>>   are for sure more work going on on exactly this kind of thing and
>>   a case in point there's I'm going to link an individual draft
>>   that's dealing more with supply chain from a software supply
>>   chain like s bomb and things like that this this work is going
>>   on.
>> Mike Prorock:   Whether we like.
>> <bumblefudge> Fraunhofer SIT 🤩
>> Mike Prorock:  And so it's kind of forcing some decisions like
>>   can we you know try to engage in a positive way and help move
>>   those work items forward while also making sure our needs are met
>>   from a like I have no desire to move away from verifiable
>>   credentials like none whatsoever so you know it's stuff we just
>>   kind of have to be aware of that is happening and unfortunately
>>   because the players involved that stuff.
>> Mike Prorock:   I'll get critical mass.
>> Mike Prorock:  Like there's not only you know major players
>>   involved in this kind of stuff and at that actual like protocol
>>   API level type definition in architecture level definition but it
>>   dition Ali there is regulatory momentum to go ahead and push some
>>   of that stuff through I mean we're seeing increasing amounts of
>>   executive orders on like how do you respond to zero trust
>>   architecture things like that so these are you know items at
>>   least from the US perspective.
>> Mike Prorock:   Spective as well as also you know increased.
>> Mike Prorock:  On the EU perspective that we're going to see some
>>   of this stuff either you know get moved out of our hands because
>>   we're not getting stuff ready quick enough or you know in a
>>   presentable State quick enough or sometimes is as as I've seen
>>   happen a couple of times lately take the work too far before
>>   getting the conversation going with other players right and then
>>   then it does become one of those like worst-case scenarios where
>>   you're sitting down and rewriting stuff or readapting.
>> Mike Prorock:   Whatever you just.
>> Mike Prorock:  Forced into using and we want to avoid that as
>>   well so so it's a complex it's a complex issue and it does make
>>   me nervous and I think it should ultimately anyone who is working
>>   heavily on things like VC API or off shoots of it and profiles
>>   should be thinking about this stuff you know broadly and from a
>>   big picture with you know who are the players in the ecosystem
>>   taking this stuff seriously.
>> Mike Prorock:   You know who made.
>> Mike Prorock:  Out-compete whether we want them to or not.
>> Manu Sporny:  Yeah I guess it's so I what I'm hearing is that
>>   there are other groups out there that are working on technologies
>>   that either directly compete with verifiable credentials or
>>   directly compete with the verifiable credential API and we should
>>   be aware of those initiatives I think that's the one of the
>>   things I'm hearing the other thing I'm hearing is that.
>> Manu Sporny:  Ricci might not be the best place for some of this
>>   work and I think there was a finger pointed at the VC API
>>   potentially so those are the two things I heard both Orion and
>>   Mike you saying please correct me if I didn't hear that correctly
>>   the third thing is a bit it's so nebulous it's hard for me to
>>   understand what you're asking the community to do.
>> Manu Sporny:   Do other than be.
>> <orie> I am not asking for anyone to do anything.
>> <orie> contribute where you think you should.
>> Manu Sporny:  In the be aware even that is kind of like it's you
>>   know it's not clear to me what the alternate plan wouldn't what
>>   an alternate plan would be so I'm not hearing a very okay so are
>>   you saying he's not asking anyone to do anything just be aware
>>   that other work is happening elsewhere so let me let me stop
>>   talking no mics on the Q I'm having a hard time.
>> Mike Prorock:  Yeah I can get I can get into some very specifics
>>   you know from like my personal and this is not chair hat right
>>   this is just like me personal member of the community writing and
>>   deploying software that is dependent on these specs right and
>>   building a business that touches all this stuff you know you know
>>   I think this is one of the reasons I fought very hard to make
>>   sure in.
>> Mike Prorock:   The working group.
>> Mike Prorock:  Order for the next version of the VC API that we
>>   can discuss from a practical developer standpoint what are the
>>   implications of this and how do you work with these things and I
>>   fought very strongly for the inclusion of two key items one was
>>   the ability for us to discuss the oid see work going on you know
>>   for exchange of credentials right over oid see that is obviously
>>   work that is going on outside the w3c that is directly related.
>> Mike Prorock:   And impacting on VCs I don't think that's.
>> Mike Prorock:  I think that's just a thing right but we when we
>>   think about it from a broader verifiable credential standpoint we
>>   need to be able to guide and provide advice around how do you
>>   actually interact with that stuff are we so you know what is
>>   helpful etcetera same thing with the VC API and I don't see a
>>   problem and I'm fact I plan to and I've stated multiple times in
>>   the working group you know plan to one author you know or make
>>   significant contributions.
>> Mike Prorock:   Tribution stew that developer guide for both.
>> Mike Prorock:  And for the VC API aspect if not fully flushing
>>   and helping to fully flush out into find the VC API in a note
>>   standpoint so I that is the path that I am proceeding down that
>>   does not negate more detailed you know specific work that may
>>   have normative requirements either in w3c or elsewhere right and
>>   so that's I think the hit man who does that help clarify a bit
>>   like you know but I.
>> Mike Prorock:   Yeah and in the main reason on like the be.
>> <identitywoman> The Relying party problem  (where can  VCs be
>>   accepted) is a really big one - the OIDC relying party "solution"
>>   is reasonable - expecting everyone to rip and replace completely
>>   to use VCs.
>> <identitywoman> is not reasonable
>> Mike Prorock:  It's like especially from you know and I'm you
>>   know being blunt here but like especially when we look at the
>>   Microsoft's the IBM's the sap is the world right these are the
>>   folks that to date have had a Stranglehold on this kind of
>>   information exchange possibly also with GSX if you want to go
>>   down the EDI path also you know additionally and so we need to be
>>   aware that they will do you know players that have an established
>>   foothold will do what they can to prevent losing.
>> Mike Prorock:   That established footholds.
>> Mike Prorock:  And it's just something we talked around that
>>   issue a lot but we should be aware of it concretely and also be
>>   very much Mindful and watching carefully what they are doing in a
>>   standards basis to that could potentially serve as something that
>>   is a competing standard that is a standard possibly even
>>   sometimes in name only in order to justify a proprietary solution
>>   and those are things we need to avoid from a lock-in standpoint
>>   etcetera.
>> Kimberly Linson:  Thanks Mike Adrian you're on the Queue next.
>> Adrian Gropper:  Yes after working on this issue that we're
>>   talking about now for about a year and talking to a lot of people
>>   my conclusion has is that the protocol work that's going on here
>>   under the very reasonable flag of self Sovereign identity and
>>   authentication things does not Translate.
>> Adrian Gropper:   Late in.
>> Adrian Gropper:  Moving those under that decentralisation self
>>   Sovereign flag to protocol work as it's being done in w3c and so
>>   I at least you know have am completely moving the protocol
>>   attention to ietf basically because you know the things that are
>>   very much in the news these days whether you want to call.
>> Adrian Gropper:   Them human.
>> Adrian Gropper:  You trust or other things like that have to do
>>   with the platform issues regulating the platforms and and things
>>   like that and we just seeing that every day and to me the
>>   protocol work that I've witnessed here is just completely
>>   detached from the reality of what the world is worried about in
>>   Europe and different cultures.
>> Adrian Gropper:  Seeing again from this antitrust and human
>>   rights perspective thank you that's it.
>> Kimberly Linson:  Man who I have you on the queue.
>> Mike Prorock: +1 Manu
>> Manu Sporny:  Yeah just real quick to Adrian Adrian that is just
>>   not true we have gotten delegate abby'll authorization
>>   capabilities working for the VC API full delegation so it
>>   achieves the things you've been asking for for a long time we
>>   have yet to put it in scope because the group's not ready to do
>>   it yet so I strongly strongly disagree with your notion that
>>   we're not paying attention to things like human rights and
>>   delegation.
>> Manu Sporny:   And specifically.
>> Manu Sporny:  Ensuring that providers don't prevent you know
>>   those holders from delegation so that's the first point the
>>   second Point Orion Mike maybe I read what you two are saying as
>>   in as a you're abandoning the be Capi work I don't think that's
>>   what you meant to communicate but that's how I read it or even
>>   abandon the be Capi work at w3c so.
>> Manu Sporny: +1 To support VC-API, yes, DB is fully committed to
>>   that work item.
>> Mike Prorock:  Okay quite the yeah and I'm on Q I'm just going to
>>   act myself because of time and quite the opposite I mean that's
>>   why I stated clearly like I plan on you know if not being a
>>   primary author like major contributions on the actual developer
>>   guide node or whatever that ends up becoming and that will
>>   include how do we do restful exchange and handling of verifiable
>>   credentials period end of sentence right but so and I'm assuming
>>   that we'll start with the.
>> Mike Prorock:  Capi we bring that in and then we evolve it as
>>   well.
>> Mike Prorock:  Group I'd be that's.
>> Mike Prorock:  That is absolutely my attention there so I don't I
>>   think that Baseline how do you do this stuff over rest is such a
>>   core implied thing that we have to talk about it as working group
>>   right and to the point where I am willing to sacrifice a lot of
>>   my own time to go make sure that gets done so.
>> Kimberly Linson:  Thanks  Mike, Orie.
>> Manu Sporny: +1 To what MikeP was saying.
>> Orie Steele:  Yeah I'm you know working with folks on the
>>   verifiable credentials Charter on in support of the work items
>>   that have been added both you know as normative deliverables on
>>   non-normative deliverables and in the VC working group is going
>>   to be the place where the VC API even gets defined better or it
>>   doesn't but good news is that it's a note in either case so I
>>   mean I'm contribute to working in that workgroup on the item and
>>   yes like at some point this community.
>> Orie Steele:   Group should theoretically.
>> Orie Steele:  Each day final Community Draft before handing that
>>   work to them but if it's going to go into a note it doesn't seem
>>   like that really matters and so really what I'm saying is I'll
>>   continue to do work on the item wherever it is.
>> Manu Sporny:  Yeah okay plus 1 that's so that's that's crystal
>>   clear and that's good thank you for making clarification like a
>>   Nori the note thing a w3c has traditionally been used to signal
>>   that the group would like to pick something up like groups
>>   actually right in the top of the document we intend to pick this
>>   up as a normative work item at some point in the future and that
>>   is usually a very good signal that leads to a smoother each
>>   ordering process so that's why.
>> Manu Sporny:  Some groups have published notes for things.
>> Mike Prorock: +1 Manu
>> Manu Sporny:  To take wreck track in Annex recharter it just
>>   makes it all you know it makes all of it much much easier my
>>   suggestion is that we can do both we can continue to work on that
>>   in this group and refine it and get the test Suites get
>>   interoperability working while throwing snapshots over the wall
>>   to the verifiable credential working group I think that gets us
>>   the best of both worlds.
>> Manu Sporny:   And keeps us very nimble.
>> Manu Sporny:  In ensures that we keep it at number one priority
>>   will not be a number one priority in the verifiable credentials
>>   working group but we as the ccg for the VCA be I can keep in a
>>   you know very high priority and in finish it up with respect to
>>   like work going on elsewhere yes indeed be again to be to be
>>   blunt I think that there is damaging work happening in other
>>   organizations when it comes to protocols and verifiable
>>   credentials.
>> Manu Sporny:   And I don't expect that to be.
>> Manu Sporny:  Traversal will point fingers at which organizations
>>   are doing it but you know I think you're both Orion my core right
>>   we need to be on top of that we need to pay attention to the work
>>   happening elsewhere in there are very powerful Market forces that
>>   could either accidentally re centralize everything or on purpose
>>   centralized things for you know the purposes of market dominance
>>   and things of that nature that's it.
>> <orie> Many folks feel the same way about the CCG manu... it's
>>   the nature of human tribalism.
>> Kimberly Linson:  Mike you've got 30 seconds.
>> Mike Prorock:  Yeah and in conclusion I would also say that and
>>   you know in a little bit of clarification man who around like
>>   damaging work I think in some cases like the software supply
>>   chain stuff I think it's extremely well intentioned and really
>>   important work just that VCS weren't on their radar neither were
>>   kids but there was a desire to go after there is a desire to go
>>   after decentralisation so they seem willing to learn and engage
>>   at least at the you know early stages.
>> <bumblefudge> perhaps they were really wed to COSE?
>> <orie> yes, some folks like COSE over JSON.
>> <manu_sporny> I know folks feel the same way about CCG, Orie :)
>>   -- and it is the unfortunate nature of tribalism. People spend
>>   time on the things that they want to contribute to, where they
>>   want to contribute to them.
>> Mike Prorock:  They can write and ultimately could help adoption
>>   if you know if we approach the right way if we don't approach it
>>   in a you know we can't you know like anything right you can't go
>>   in assuming that we have the only right path and everything else
>>   right it's yes we have a a path it is right in many many ways but
>>   it also can be adopted into other things right or as a piece of
>>   other things so.
>> <bumblefudge> patience!?
>> Kimberly Linson:  Great thank you this was a really interesting
>>   discussion and I'm I learned a lot about sort of how the
>>   community group and and the working groups work together and so I
>>   really appreciate everybody's input we're just about at time so
>>   I'm going to go ahead and wrap us up I'll let you know that next
>>   week I'm going to be talking about decentralized storage thank
>>   you everybody for your patience with me today and have a great
>>   rest of your day thank you.
>> <manu_sporny> You did great, Kimberly! :)
>> <heather_vescent> Great job Kimberly!!
>> <bumblefudge> you're doing great! thanks so much
>> <kerri_lemoie> Thank you!
>>
>>
>>