Re: [Cbor] Deterministic CBOR as a possible DISPATCH item

Christopher Allen <christophera@lifewithalacrity.com> Mon, 06 March 2023 21:49 UTC

Return-Path: <christophera@lifewithalacrity.com>
X-Original-To: cbor@ietfa.amsl.com
Delivered-To: cbor@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 79C3BC152EF2 for <cbor@ietfa.amsl.com>; Mon, 6 Mar 2023 13:49:24 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level:
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lifewithalacrity-com.20210112.gappssmtp.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d93yNmHDnlXM for <cbor@ietfa.amsl.com>; Mon, 6 Mar 2023 13:49:22 -0800 (PST)
Received: from mail-ed1-x530.google.com (mail-ed1-x530.google.com [IPv6:2a00:1450:4864:20::530]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 489CFC152EF0 for <cbor@ietf.org>; Mon, 6 Mar 2023 13:49:22 -0800 (PST)
Received: by mail-ed1-x530.google.com with SMTP id u9so44838157edd.2 for <cbor@ietf.org>; Mon, 06 Mar 2023 13:49:22 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lifewithalacrity-com.20210112.gappssmtp.com; s=20210112; t=1678139360; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=YynDqnerQM3hJchkMscazOXsxwDmxrCBJANqfLSQPlE=; b=6k1zRMcVGpNeMg6zlvtEqsnSbUAtCGZ7uqdvsyTz3z8o/APQQiXblnPLMT04ur4ceM 8/vgksfPXtft8PafgGEwkrXsEIUC/ugDRisALK9s/1yeHtKDNHgGaXNgAwKaU24Dj4Mu oA3qCNNcBJkL2o/TbIXh+cUaWRUItX7a+zy2GXYys5ofvQmm6gVxAhU9HsWNNHGQWLzG vzd0vfH3spVO01AkePSsIf4OvBGZuPoE9Xj4kqiKvms1L5rZ+EEw9Okycem3Zb/Rk7wm AYwxKf35B8HwdbNnxpWSAi2fEfpSuydkiLWpNsrF3ZqavOJvKOJUWQdikx33HfRTSMvm j99A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1678139360; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=YynDqnerQM3hJchkMscazOXsxwDmxrCBJANqfLSQPlE=; b=ux6yx+iAc+rgRKN8IWOsdjo2U/tHM0H1uaLeUaP+qdREWVEoxTby6z1rfXlbtuaQgL YzOAEIA5zQbUopSXz0GAHHJJ/ndQOfWtEpsYh3RWQsiqloW+h+WZCtq3CPFk48pY9tJ/ OqRkY9NxLRpKdveevVnxIoSUMgLf8SP8ES8Rm8H5rcZqVPbY7a6T6vyB8xWjmdGz5PVj 978lEUFYIXIGYZg9NILmZ/AlH6e3rUV66b5Je1H+pGHB3za+Xff1OxKxVvjnLA+mpWh9 RkutwuNi/VnfssU0NhvumOJU5kMCxfa68F+WRWgvkKq4rhnpp5KbvO0aJT+ZQx0J/Ib4 4E1g==
X-Gm-Message-State: AO0yUKV37KsbLk4G/kgwC3fsiZMWNW86k1MojHlwOnwHm5ZC6C5fFF7I dT8vCaXOi6HQGO1fUHitk0BTl8s/Bb2mWVtZLnhjjw==
X-Google-Smtp-Source: AK7set9lXj/63UtqYDq+tNls88t8ynuMVAhPxaPLXk9cQ+v6SGclwoCm9jcGtuFS7GJ0YJp0sdJKjZw+senBcc7RRd8=
X-Received: by 2002:a17:906:1255:b0:87d:ce4:eb7a with SMTP id u21-20020a170906125500b0087d0ce4eb7amr2393857eja.13.1678139360609; Mon, 06 Mar 2023 13:49:20 -0800 (PST)
MIME-Version: 1.0
References: <A9CF043D-4FA9-48D4-B953-3BE7AA40D1E0@tzi.org> <D25A0C94-ADAD-4C3D-8669-AA7FE9A6B3C4@wolfmcnally.com> <FA0E2D22-37F4-4C27-B5F5-E841D13EF0CF@tzi.org> <1DA00A88-64DF-48FD-B03E-10B520934DD2@island-resort.com> <3D57170C-61E4-4192-8B5F-120134ADA964@tzi.org> <F16409C6-81FF-4C99-A465-0BE1C07AD603@island-resort.com> <CAAse2dFgsHP-kpu-vgfc0JbSvzL9PEG5+0FTE-xVAWfvqBQycg@mail.gmail.com> <304E9B02-FCC6-41A0-B309-C02F998B9A53@island-resort.com>
In-Reply-To: <304E9B02-FCC6-41A0-B309-C02F998B9A53@island-resort.com>
From: Christopher Allen <christophera@lifewithalacrity.com>
Date: Mon, 06 Mar 2023 13:49:09 -0800
Message-ID: <CAAse2dHO8DRPqZsMapA8h4LB5AHk45rY_O3EypLMW6TyeDypJg@mail.gmail.com>
To: Laurence Lundblade <lgl@island-resort.com>
Cc: Carsten Bormann <cabo@tzi.org>, Wolf McNally <wolf@wolfmcnally.com>, Anders Rundgren <anders.rundgren.net@gmail.com>, cbor@ietf.org, Shannon.Appelcline@gmail.com
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/cbor/M_UBeNOQte3amSIavNvlvCk-4vg>
Subject: Re: [Cbor] Deterministic CBOR as a possible DISPATCH item
X-BeenThere: cbor@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Concise Binary Object Representation \(CBOR\)" <cbor.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/cbor>, <mailto:cbor-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cbor/>
List-Post: <mailto:cbor@ietf.org>
List-Help: <mailto:cbor-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/cbor>, <mailto:cbor-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 06 Mar 2023 21:49:24 -0000

On Mon, Mar 6, 2023 at 1:27 PM Laurence Lundblade <lgl@island-resort.com> wrote:
> I was mostly thinking in terms of simple point-point protocols much different than what you are working on.

You are correct here — I've not been sufficiently emphasizing an
important aspect of Gordian Envelopes is that they are not solely for
point-to-point, but also data-at-rest. Though there are many use cases
for Gordian Envelopes beyond credentials, some of our communities'
pressing requirements for persistent credentials mean that they may be
permanently stored for a long time.

One use case for Gordian Envelopes really exemplifies this, the
educational credentials use case:

A school issues a student a credential, which in turn, they use to get
a job, which in turn is used by the employer to prove that they have
the personnel to make a bid, and then contractor uses it for
insurance. In another chain of holders, the subject got a loan for the
education, the school needs to prove to an approval body that student
loans result in jobs.

In all of these, the many "holders" of the credential have different
requirements, and the whole chain risks the subject's privacy.

See our first answer to address these problems using Gordian Envelope
at https://github.com/BlockchainCommons/Gordian/blob/master/Envelope/Use-Cases/Educational.md

-- Christopher Allen