Re: Call for Consensus: FPWD of Digital Credentials API spec

Hi Wendy,

On Tue, May 13, 2025 at 6:15 AM Wendy Seltzer <wendy@seltzer.org> wrote:

> Following our WG hybrid meeting[1] and further issue resolution, we're
> calling for a consensus to publish the editor's draft dated 5 May [2],
> https://w3c-fedid.github.io/digital-credentials/
> as First Public Working Draft of the Digital Credentials API. FPWD does
> not mean all issues are resolved, but gives us a stable reference from
> which to engage with outside groups for horizontal review.
>

We would prefer to see this decision delayed until there is more substance
in the document.  In particular, the formal objection raised during the
formation of the working group [1] raised some issues that this group
agreed to address. Those are not addressed in the document presently.
However, there is just enough detail in the specification to (probably)
implement something.  That means that the harms might be deployed,
unmitigated, based on the FPWD.

As you say, a FPWD gives others a stable reference to use.  We would prefer
that that not happen until basic safeguards are in place.  Within the W3C,
there is at least an understanding that these important issues are yet to
be addressed.

The council report [2] makes several recommendations that we believe
roughly cover what would be necessary; there is also an open issue on
documenting privacy considerations that identifies the relevant sections
[3].

[1]
https://lists.w3.org/Archives/Public/public-review-comments/2024Sep/0017.html
[2] https://www.w3.org/2025/02/council-report-fedid-dig-cred.html
[3] https://github.com/w3c-fedid/digital-credentials/issues/183