W3C home > Mailing lists > Public > public-webappsec@w3.org > April 2015

WebAppSec Credentials Management API FPWD consensus plan

From: Manu Sporny <msporny@digitalbazaar.com>
Date: Fri, 17 Apr 2015 00:30:32 -0400
Message-ID: <55308C68.5060602@digitalbazaar.com>
To: "public-webappsec@w3.org" <public-webappsec@w3.org>
(bcc: Web Payments IG, Credentials CG)

This is an attempt to propose a plan that will achieve consensus on the
WebAppSec Credentials Management API FPWD publication. It is informed by
the state of discussions[1][2][3] that have been occurring in the github
issue tracker.

Requests that, if fulfilled, will almost surely result in consensus:

1. Continue to work together to refine changes to the API and data
   model via github issue 256[3].
2. Support fetching credentials from locations that are not the
   browser (IdP websites, for example) and are not login
3. Come to consensus that the data model in the API will work for
   both local credentials and Linked Data credentials served from
   IdP websites without placing an undue burden on the API.

Requests that would most likely be a good idea as the spec progresses:

1. The Web Payments IG and Credentials CG should be ping'd from time to
   time to do spec reviews.
2. An organization in the Credentials CG will do an experimental
   polyfill implementation of the Credentials Management API to ensure
   that it is workable from our standpoint.
3. Briefly mention the Credentials CG work in the spec since you
   mention Persona and WebID. I'd be happy to submit a PR for this.

It is also important to understand what isn't being requested:

1. We don't want to formally add the burden of the Credentials CG or
   Web Payments IG use cases, requirements or IP commitments to the
   WebAppSec group.
2. We don't want to delay the publication of the document by a
   significant amount of time.
3. We don't want to complicate the API to the point that it doesn't
   serve the primary "Login Manager" use case well.

I hope this is helpful in highlighting some concrete goals that we can
all try to achieve together. The editor, chairs, and staff contacts from
the WebAppSec, Web Payments, and Credentials groups will be meeting
tomorrow morning to discuss this plan as well as other concerns.

-- manu

[1] https://github.com/w3c/webappsec/issues/254
[2] https://github.com/w3c/webappsec/issues/255
[3] https://github.com/w3c/webappsec/issues/256

Manu Sporny (skype: msporny, twitter: manusporny, G+: +Manu Sporny)
Founder/CEO - Digital Bazaar, Inc.
blog: The Marathonic Dawn of Web Payments
Received on Friday, 17 April 2015 04:31:10 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:54:48 UTC