Re: [OAUTH-WG] Type Metadata for SD-JWT VC

Tom Jones <thomasclinganjones@gmail.com> Wed, 03 April 2024 15:51 UTC

Return-Path: <thomasclinganjones@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BA3FDC151701 for <oauth@ietfa.amsl.com>; Wed, 3 Apr 2024 08:51:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.094
X-Spam-Level:
X-Spam-Status: No, score=-2.094 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wKKSiSKu3qB7 for <oauth@ietfa.amsl.com>; Wed, 3 Apr 2024 08:51:31 -0700 (PDT)
Received: from mail-ej1-x631.google.com (mail-ej1-x631.google.com [IPv6:2a00:1450:4864:20::631]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 43C09C151551 for <oauth@ietf.org>; Wed, 3 Apr 2024 08:51:31 -0700 (PDT)
Received: by mail-ej1-x631.google.com with SMTP id a640c23a62f3a-a474df36309so516866b.0 for <oauth@ietf.org>; Wed, 03 Apr 2024 08:51:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1712159488; x=1712764288; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=1G/hlzUHjd1xHcFj9BwfzQ7cJEbx1PYhCEZuakN2qCQ=; b=nVsRRGyS2w7+SfTzBRwZ63E/yWmM/LWVRgdqHMhg74rEAE+xJL91XHU/6Q6J2AvRmF d3ExjhDzGumDSoQQ+ahURC+OhqAjNYF5/KuUKL1fn3IO6V6TgE20eRiCYhzBXXDL7Dcb H3/nFr4yPIlKj1BJNy63b3kOMsCeKKpInZw6yblNVujv/TEyX80wquOLeIHbEGOi6SIp EruD/Ou+WUzj6cZf06v9g3HKoMpbzs+RGSvxQIWqtSwbXZpCSfYFNOWq0CjhprsbidQK /8mkiXka9r6bUYIumVxKxaeT2HQ3YR3j3uYlwgvoMRHBHcYqZf+RhaOOoHxiP1RtTP4Q bMCA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1712159488; x=1712764288; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=1G/hlzUHjd1xHcFj9BwfzQ7cJEbx1PYhCEZuakN2qCQ=; b=W7zXusZXmhSklfVdnfotauqaDvmld8zihZde2L/j+zMlrJB9eAM2JzIooKNDoguNUd UGCeYqfyiuhRtNMhyZrjViNFiDx8B9BGxgfrrhYjffCCpAqXfVK6KV1WvNAas6EpR12u xy/LbqsZL4IzcYjEz8KB71eyUrhZoHyaRM4nYMTKobc2M/YeuJwwiMAsUwgUB8oPvfi4 yTmxtMpsvwvjvCxHkz3YuO2ApCoY3gqi1OwdlhpaXgRhYJBFp+ZY08Vqze4bGI0ZoeVD QogPfkqv1/yRq1XGA7fISjQ93F51ssoANOTMgc6VmtObeyaL3RGUMM4JCpC2GbhTy8km eSsg==
X-Gm-Message-State: AOJu0YyqNepJK/6W5RHuiqcR+ZEFQdrJR2FWoJifb6qxzolbReRQQiq3 i6zBwVDnsqH1bE7vRZi3Gpddx8X87Nz6wnFdL5NAq+fFOQxEX/vz4hXrzIkpcQkdQeTfxM+4Wx2 p1aNi3cL8i3x1pMum2uc1bXo13EVxhg9a
X-Google-Smtp-Source: AGHT+IGBubqzD2mOc2dqHg0lXFYpLuFc89oxp3sRJqKoJFsr9gWFCbWrUkFXQiEzEETk1ApvGdER3va2rXnVSmqwc9E=
X-Received: by 2002:a17:906:c7d1:b0:a51:79d5:afb7 with SMTP id dc17-20020a170906c7d100b00a5179d5afb7mr678459ejb.6.1712159488260; Wed, 03 Apr 2024 08:51:28 -0700 (PDT)
MIME-Version: 1.0
References: <680b1aac-3845-461d-a063-09f7a7db9dd9@danielfett.de>
In-Reply-To: <680b1aac-3845-461d-a063-09f7a7db9dd9@danielfett.de>
From: Tom Jones <thomasclinganjones@gmail.com>
Date: Wed, 03 Apr 2024 08:51:15 -0700
Message-ID: <CAK2Cwb6QnOeSHf7kXxV7-eQO0mh5EB=Z-DB--TZrizSoE+Dcsw@mail.gmail.com>
To: Daniel Fett <mail=40danielfett.de@dmarc.ietf.org>
Cc: oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000018c2610615333269"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/Y_75QDUmXjMvliBS274eM66J00c>
Subject: Re: [OAUTH-WG] Type Metadata for SD-JWT VC
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 03 Apr 2024 15:51:34 -0000

So now we are proposing types of types of types of data elements. I feel
really bad about this as I introduced the first semantic tag into EDI back
in the 1980s. I can't believe it has come to this. I can't believe that
anyone imagines giving this sort of specification to different programmers
and expecting interoperability. There must be a better way!

thx ..Tom (mobile)

On Wed, Apr 3, 2024, 12:22 AM Daniel Fett <mail=
40danielfett.de@dmarc.ietf.org> wrote:

> Hi all,
>
> as discussed during IETF 119, we would like to introduce what we call Type
> Metadata to SD-JWT VC.
>
> For a bit of context, the intention is to provide a mechanism to provide
> information about credential types (e.g., a JSON schema, display/rendering
> information, a name and description to be used by developers, etc.). Type
> Metadata can be organized in a hierarchical structure using "extends"
> relationships.
>
> The need for such a mechanism developed from discussions around the 'vct'
> (Verifiable Credentials Type) identifier
> <https://github.com/oauth-wg/oauth-sd-jwt-vc/issues/181> in SD-JWT VC and
> again in the context of the EUDI Wallet
> <https://github.com/danielfett/sd-jwt-vc-dm>.
>
> I drafted a first tentative design in this specification
> <https://vcstuff.github.io/sd-jwt-vc-types/draft-fett-oauth-sd-jwt-vc-types.html>
> and we now want to revisit that and start moving pieces of that over to
> SD-JWT VC.
>
> The first PR <https://github.com/oauth-wg/oauth-sd-jwt-vc/pull/220>
> introduces the basic Type Metadata structures including the extension and
> integrity protection mechanisms. It lacks many of the features we would
> like to see in an MVP, so we plan to release a new draft only after
> introducing a few more features
> <https://github.com/oauth-wg/oauth-sd-jwt-vc/issues/224> in follow-on PRs.
>
> We would like to invite you to review the PR and let us know if there is
> any feedback! I also plan to discuss this in more detail at an unconference
> session at the OAuth Security Workshop.
>
> -Daniel, Brian, Oliver
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>