Re: DID WG Special Topic Call (Service Endpoints)

>
> PROPOSAL: Remove Service Endpoints from the specification and rely on
> Verifiable Credentials (e.g., transmitted during DID Auth) to
> communicate Service Endpoints.
>

I may not understand this proposal fully or correctly. However, my gut
reaction is to be concerned about the implication that we must do DID Auth
before we could know how to talk to a DID controller. That feels *very*
undesirable to me. We aren't even clear about how to do DID auth (there
have been a variety of approaches to it over the past 3 years, and I'm not
aware of any of them being standardized).

The privacy rationale also doesn't resonate with me. For institutions,
service endpoint privacy doesn't matter much, and for individuals, I think
that's what herd privacy (many individuals at a single endpoint) should
solve.