- From: Manu Sporny <msporny@digitalbazaar.com>
- Date: Mon, 19 Jun 2023 13:08:16 -0400
- To: "W3C Credentials CG (Public List)" <public-credentials@w3.org>
On Mon, Jun 19, 2023 at 1:41 AM Luca Boldrin <luca.boldrin@infocert.it> wrote: > Thank you Manu for your very analytic response! Indeed it helps a lot. Good, glad it helped. :) > On “credential schema” you are right, I was imprecise. In fact I had in mind something like EBSI’s “trusted schema registry”, i.e. the association between issuers and the types of credentials they can issue Ah, yes, we were talking about different things. > On “revocation registry”, well, I expect every credential (including atomic ones) to be revokable. Hence I expect the revocation process to be more complex if the verifier needs to check 10 atomic credentials instead of 1 composite credential. Isn’t it? If you take the atomic credentials approach, then yes, it's more complicated because you have to check 10 atomic credentials for revocation. HOWEVER, if you use something like ecdsa-sd, then there is only one revocation list (which you have to mandatorily disclose), but you can still selectively disclose other statements in the VC. So, it's no more complex (from a revocation standpoint) than a single VC. > On the intricacies of selective disclosure, I do agree, I also believe it will take time for a full understanding. But I also have the feeling that most concrete use cases can be managed with simple atomic credentials (at least, from my limited perspective based on EU identity wallet use cases...). Yes, possibly. Personally, I think it's too early to tell, and the fact that we have selective disclosure technologies now that can be deployed in parallel to get market feedback is a good thing. There are very few examples of a single technology or a single approach being the way that something is done globally. Selective disclosure is no different and so we'll need to find ways to ensure that multiple approaches can be taken (without increasing technical complexity to the point where only large tech companies can compete -- case in point -- web browsers, operating systems, cloud services, etc.) -- manu -- Manu Sporny - https://www.linkedin.com/in/manusporny/ Founder/CEO - Digital Bazaar, Inc. https://www.digitalbazaar.com/
Received on Monday, 19 June 2023 17:08:58 UTC