WebAppSec Credentials Management API FPWD consensus plan

(bcc: Web Payments IG, Credentials CG)

This is an attempt to propose a plan that will achieve consensus on the
WebAppSec Credentials Management API FPWD publication. It is informed by
the state of discussions[1][2][3] that have been occurring in the github
issue tracker.

Requests that, if fulfilled, will almost surely result in consensus:

1. Continue to work together to refine changes to the API and data
   model via github issue 256[3].
2. Support fetching credentials from locations that are not the
   browser (IdP websites, for example) and are not login
   super-providers.
3. Come to consensus that the data model in the API will work for
   both local credentials and Linked Data credentials served from
   IdP websites without placing an undue burden on the API.

Requests that would most likely be a good idea as the spec progresses:

1. The Web Payments IG and Credentials CG should be ping'd from time to
   time to do spec reviews.
2. An organization in the Credentials CG will do an experimental
   polyfill implementation of the Credentials Management API to ensure
   that it is workable from our standpoint.
3. Briefly mention the Credentials CG work in the spec since you
   mention Persona and WebID. I'd be happy to submit a PR for this.

It is also important to understand what isn't being requested:

1. We don't want to formally add the burden of the Credentials CG or
   Web Payments IG use cases, requirements or IP commitments to the
   WebAppSec group.
2. We don't want to delay the publication of the document by a
   significant amount of time.
3. We don't want to complicate the API to the point that it doesn't
   serve the primary "Login Manager" use case well.

I hope this is helpful in highlighting some concrete goals that we can
all try to achieve together. The editor, chairs, and staff contacts from
the WebAppSec, Web Payments, and Credentials groups will be meeting
tomorrow morning to discuss this plan as well as other concerns.

-- manu

[1] https://github.com/w3c/webappsec/issues/254
[2] https://github.com/w3c/webappsec/issues/255
[3] https://github.com/w3c/webappsec/issues/256

-- 
Manu Sporny (skype: msporny, twitter: manusporny, G+: +Manu Sporny)
Founder/CEO - Digital Bazaar, Inc.
blog: The Marathonic Dawn of Web Payments
http://manu.sporny.org/2014/dawn-of-web-payments/

Received on Friday, 17 April 2015 04:31:10 UTC