Re: Authorized Issuer Lists

On Mon, Aug 15, 2022 at 11:23 AM Phillip Long <pdlong2@asu.edu> wrote:
> Manu - you’ve hit a very significant nerve in the ecosystem.

Almost seems premeditated, doesn't it? :P

steve.e.magennis wrote:
> I completely agree r.e. I see it as important for the verifiers to be able to communicate to the holder in a standard way whom they accept as issuers for specific claims/credentials.

The Verifiable Presentations Request specification has such an entry
called "trustedIssuer":

https://w3c-ccg.github.io/vp-request-spec/#query-by-example

... and it might be that we expand that field to include the ability
to list "authorized issuer lists" or things of that nature in the
future.

Paul Dietrich wrote:
> As use cases grow, I could see many verifiers applying both of these methods simultaneously.

Yes, exactly this. The goal for the RWoT work would be to address the
low-hanging fruit, while acknowledging the more involved use cases and
requirements. What we don't want to end up with is the belief that the
ONLY way for a verifier to trust an issuer is through these
lists/registries. They are merely meant as a way for a verifier to
bootstrap into an existing ecosystem and overlay their own preferences
on top. In that way, they're generally closer to a music play list
("Thanks for the suggestions, I'll take it from here!") than they are
an AUTHORITATIVE LIST OF MUSIC YOU WILL LIKE.

That said, some industries will require explicit use of an
industry-standardized-list ("If you accept credentials from anyone
else, you might be sued!") while others may be entirely curated by the
verifier ("Join our drum circle, all fellow travellers are welcome!"),
while others will be a hybrid. This is about providing tools to those
that need them rather than imposing rules on those that don't want
them. Tools, not rules. :)

The conversation so far has been great, keep it coming folks!

-- manu

-- 
Manu Sporny - https://www.linkedin.com/in/manusporny/
Founder/CEO - Digital Bazaar, Inc.
News: Digital Bazaar Announces New Case Studies (2021)
https://www.digitalbazaar.com/

Received on Tuesday, 16 August 2022 02:33:43 UTC