VC API Task Force
Transcript for 2022-09-06
- (Re-)Introductions, Relevant Community Updates
- OIDC4VCI and VC API
- How granular should authorization be?
- Define credentialStatus correctly in YAML
- Manu Sporny
- Our Robot Overlords
- Patrick St-Louis, Brian Richter, Manu Sporny, TallTed // Ted Thibodeau (he/him) (OpenLinkSw.com), Dave Longley, Kaliya Young, David Chadwick, Joe Andrieu, Eric Schuh, Logan Porter, Kayode Ezike, TallTed // Ted Thibodeau Jr (via iPhone)
- Audio Log
Our Robot Overlords are scribing.
Topic: (Re-)Introductions, Relevant Community Updates
<tallted_//_ted_thibodeau_(he/him)_(openlinksw.com)> please update the CCG calendar item which is already there
TallTed_//_Ted_Thibodeau_(he/him)_(OpenLinkSw.com): It was because if you updated.
TallTed_//_Ted_Thibodeau_(he/him)_(OpenLinkSw.com): Yeah yeah the W3 calendar is working very well.
TallTed_//_Ted_Thibodeau_(he/him)_(OpenLinkSw.com): Oh I apologize.
Topic: OIDC4VCI and VC API
<dave_longley> four main VC functions: issuance, verification, delivery, presentation
<joe_andrieu> /s/nid foundation/OpenID Foundation/
<dave_longley> you can combine the technologies/protocols together
<logan_porter> same that I don't seem to be getting picked up by the transcriber bot
<dave_longley> could you type in what you said, Logan ... so we have it for the minutes?
<kaliya_identitywoman> but how do you know the wallet has been built with proper securitiy?
<dave_longley> +1000 to David Chadwick's concerns on wallet identification to the issuer problems
<david_chadwick> To Kaliya. By having the software certified by a TTP
<kaliya_identitywoman> What is a TTP and how does the issuer know that it has passed such a thing?
Topic: How granular should authorization be?
<david_chadwick> Trusted Third Party certification authority
<dave_longley> if you have to do dynamic registration and identify a callback URL to send the authorization code, you're identifying the wallet to the issuer
<david_chadwick> By the TTP issuing a VC to the wallet
<kaliya_identitywoman> what is a TTP???
<kaliya_identitywoman> sometimes people and their acronyms
<david_chadwick> I already said "trusted third party"
Topic: Define credentialStatus correctly in YAML