Hi Boris,
I agree these are desired realities.
> Within an EUDI Wallet, a DID can be generated and a credential can be
issued to that DID and stored in the wallet, provided the issuer considers
it conformant.
Yes, a DID or VC can be generated anywhere and moved anywhere.
> This credential can operate independently from the PID or any QEAA
residing in the wallet. The trust level, however, would depend on the
issuance framework and assurance level applied by the issuer.
Of course, a DID has no inherent trust built-in other than the ability to
prove control of that DID. Only after a verifiable credential that matters
to the verifier specifically is issued to the DID by an issuer that matters
to the verifier can the verifier associate a level of assurance/trust to a
DID and then verify that the entity presenting themselves as the DID has
access to the verifiable private key of that DID.
For Steffen,
> to make it even more complex: you could also put the trust on kind of DID
– standard compliant or not 😉
Yes, if active holdership is not provable through cryptography and the DID
document’s history is not tamper-evident, it obviously cannot be trusted.
So a standard, widely trusted DID method matters.
> Global Trust I guess would be defined on standardization level not
legislation.
What and who is trusted is a matter of governmental jurisdictions or
overall domain specific questions, legislation overlap may or may not
happen, trust towards same issuers and relevancy of claims may or may not
happen.
How claims that assert these trust statements look, and how they are
verified in a globally interoperable way, including what an issuer and a
subject look like, are matters of technical standardization.
I'm super glad to hear these are goals within the EU, I'm interested:
How likely will they get adopted or are they already being implemented to
EUDIW / eIDAS?
Regards,
Jori