Re: [SPICE] Informal Meeting Notes (errata)

Orie Steele <orie@transmute.industries> Fri, 05 January 2024 14:03 UTC

Return-Path: <orie@transmute.industries>
X-Original-To: spice@ietfa.amsl.com
Delivered-To: spice@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DAE91C14F6E8 for <spice@ietfa.amsl.com>; Fri, 5 Jan 2024 06:03:13 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.085
X-Spam-Level:
X-Spam-Status: No, score=-2.085 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, T_REMOTE_IMAGE=0.01, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=transmute.industries
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0VBBQiBg9rbd for <spice@ietfa.amsl.com>; Fri, 5 Jan 2024 06:03:09 -0800 (PST)
Received: from mail-pj1-x102a.google.com (mail-pj1-x102a.google.com [IPv6:2607:f8b0:4864:20::102a]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BF791C14F6E1 for <spice@ietf.org>; Fri, 5 Jan 2024 06:03:09 -0800 (PST)
Received: by mail-pj1-x102a.google.com with SMTP id 98e67ed59e1d1-28be8ebcdc1so1165006a91.0 for <spice@ietf.org>; Fri, 05 Jan 2024 06:03:09 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=transmute.industries; s=google; t=1704463389; x=1705068189; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=mLQfupKQyAukxtKuoMFZNq80yNwLyZoiGxlxwdjM/Rk=; b=cMQtuDY8vdkCeBFjvtV3OtSbm+cxWtTqxeLOEFZ/gL6MDWZfD16TyEDIg8f56nIywi xMWSL0/fP0lOvC0/MvvHT7b9DAKyv7GE+0hdegeDw9ldd3PL7iXX7pvK1C+/70WirhxD RpDJYk7oA+z1owE9hOmG8yzElMGiOGFPtQtZuW4LH9qkb6ksKgXZbfuFcfPYcLfS60KO eQtC/PpOldz+nBD2tgr7mxMdHFyVB73yIDlH/cCQG51pIkEXxUdgSuKwhbUF/3SnD2/Y JHUZjtaCO0d1Xud0DmKw3zFvdbjkIYRig8nfWhQAtq+AYnLihzPaZoh+8gC5rxp8Yvi5 t/rg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1704463389; x=1705068189; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=mLQfupKQyAukxtKuoMFZNq80yNwLyZoiGxlxwdjM/Rk=; b=tovWALbVI8EE7+cHblERXij9EznfeAk0mSz4MqIbBg6VAOp/BulLPN+gfnLtwxuYsX 4vlz5igIXElmnrGuS9+sau/SWWdPxg9HnPSaAP6Rc5T3Ul0XxxbfDaqSuFijMuSmgkO7 17Q3ROP8nDz/UYL3EalPjO20E1kAsxBCDC7TY37Kd9DJK81vowXXPJRIlc7brbTUM89U zvaSygxQ/s/ElhqdxWJ8gyBtgq00uGkDcOKxxBOY+9JRrf7XdR+AB1URkjr5gOhR39pN JjFP8J06nMS1HlFIXyQNQzV3gxAjxhGOMDsQoDm851gY7FciMODdL4fCAB7emkX3dHTI Pyqw==
X-Gm-Message-State: AOJu0YyPM3S4sUmYFoKjOYGBjyH0emldSPGw5/w5YLypnlbDxdn6u/UA okVRFpxSCxpaZF6C2LHF86yrTUFoQ7M57kvA7R99Xv9JxCp9nF8Cto0hfXN4g3YLIA==
X-Google-Smtp-Source: AGHT+IHRcQSk/TEVSFNG6LU0pFimpQMTqwPaxgp9F29nxK+QzXRklFVq/SpVYWvW3vLIetMII5EniWYCI7RVR952utc=
X-Received: by 2002:a17:90a:f2c7:b0:28b:9618:5f04 with SMTP id gt7-20020a17090af2c700b0028b96185f04mr1703477pjb.20.1704463388945; Fri, 05 Jan 2024 06:03:08 -0800 (PST)
MIME-Version: 1.0
References: <CAN8C-_JF81-sZ4dQB7_Ma7_UfAwgc8UhZ-trRHQY1TCk+t7iKg@mail.gmail.com> <9b385dd2-bc5a-c7bc-d131-0bffb4fe8d26@free.fr> <59bc594d-9539-1597-d4da-983f38dd1b49@free.fr> <CAN8C-_JrAFHRSQ7tP=+RFsVNj=6a9tRb+v4ST3r3zxp_urNHaA@mail.gmail.com> <f7bf2593-35b1-5fc0-935e-12c692357506@free.fr>
In-Reply-To: <f7bf2593-35b1-5fc0-935e-12c692357506@free.fr>
From: Orie Steele <orie@transmute.industries>
Date: Fri, 05 Jan 2024 08:02:58 -0600
Message-ID: <CAN8C-_KiK84KKPZJnnbvHyzPB6q8x5cEJXEGYeVxiv6ru3frHQ@mail.gmail.com>
To: Denis <denis.ietf@free.fr>
Cc: Hannes Tschofenig <hannes.tschofenig@gmail.com>, spice@ietf.org
Content-Type: multipart/alternative; boundary="000000000000d4c382060e334e3d"
Archived-At: <https://mailarchive.ietf.org/arch/msg/spice/S33rrcUQaWdLXfxWU1YiaJa3nDM>
Subject: Re: [SPICE] Informal Meeting Notes (errata)
X-BeenThere: spice@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Secure Patterns for Internet CrEdentials <spice.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spice>, <mailto:spice-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spice/>
List-Post: <mailto:spice@ietf.org>
List-Help: <mailto:spice-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spice>, <mailto:spice-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 05 Jan 2024 14:03:13 -0000

Issuer metadata discovery is key to understanding "what kind of credentials
can I get" and "what formats are coming in" and "how can I get them".

The word metadata is a generic term to describe data... about data... In
this case that solves the problem of "what (meta)data is discoverable about
issuers, holders and verifiers".

And all the examples we provide such as keys, claims, credentials and
proofs, are examples of data which we might want to retrieve additional
information (metadata) regarding.

Our use of the word, is consistent with other IETF working groups, for
example:

https://datatracker.ietf.org/doc/html/draft-ietf-oauth-sd-jwt-vc-01#name-jwt-issuer-metadata

I don't agree with your proposal.

OS

On Fri, Jan 5, 2024 at 1:53 AM Denis <denis.ietf@free.fr> wrote:

> Hi Orie and all,
>
> I rephrased your suggestion here:
>
>
> https://github.com/transmute-industries/ietf-spice-charter/commit/3848dac6c5b7b2ab5d91c0bb909c3f959eb2b197
>
> The new sentence is :
>
> A meta-data discovery document enabling issuers, holders and verifiers to
> discover supported protocols and formats for keys, claims, credentials and
> proofs.
>
> I would propose to drop the words "meta-data" and "issuers,". As mentioned
> earlier, an issuer does not need to discover anything.
>
> A  discovery document enabling holders and verifiers to discover
> supported protocols and formats for keys, claims, credentials and proofs.
>
> Denis
>
> I don't know what a "credential request format" is but I assume it's some
> protocol (possibly one of many) for issuance (delivering a credential from
> an issuer to a holder).
>
> You also did not include "presentation request format", which would be
> some protocol (possibly one of many) for delivering a proof (or
> presentation) from a holder to a verifier.
>
> I used "supported protocols and formats" to capture these requirements.
>
> You might consider data URIs presented through animated QR Codes to be an
> example of part of a presentation protocol.
>
> I suspect that commenting on "supported protocols" might raise the
> question of if SPICE will define issuance or presentation protocols.
>
> I think it's ok to keep it as is and not define any protocols under the
> first charter, even if we enable discovery of OIDC4VC, OIDC4VP, mDoc
> Request API, etc...
>
> If you think that we MUST define protocols for issuance and presentation
> under the first charter, we will need to add more milestones, but I don't
> want to do that.
>
> OS
>
>
> On Thu, Jan 4, 2024 at 4:24 PM Denis <denis.ietf@free.fr> wrote:
>
>> Error:
>>
>> Instead of "Verifiable Credential formats", please read: "Verifiable
>> Presentation formats"
>>
>> Denis
>>
>> Hi Orie,
>>
>> The second document is defined as follows:
>>
>> A meta-data discovery document focusing on the scalable, Internet-wide
>> discovery of keys, credential formats and meta-data for issuers, holders
>> and verifiers.
>>
>> During the meeting, I was looking for a wording better than "key
>> discovery" or "meta-data discovery"and I could not find it.
>> After the meeting, I believe that "formats discovery" would be more
>> appropriate.
>> In the list, "credential request formats", "proof formats" (i.e.;
>> Verifiable Credential formats - using the W3C vocabulary) are "claims
>> formats" are missing.
>>
>> Below is my proposal:
>>
>> A "formats discovery" document focusing on the scalable, Internet-wide
>> discovery of credential formats,
>> * credential request formats, proof formats*, *claims formats* and keys
>> for holders and verifiers.
>>
>> I dropped "issuers" from the list, since an issuer does not need to
>> "discover" anything.
>>
>> Denis
>>
>> Hello Spice Enthusiasts,
>>
>> Call attendance:
>>
>> - Orie Steele
>> - Alexander Stein
>> - Brent Zundel
>> - Denis
>> - Henk Birkholtz
>> - Heather Flanagan
>> - Justin Richer
>> - Pam Dingle
>> - Rifaat Shekh-Yusef
>>
>> Call agenda:
>>
>> - Charter Text Revisions
>> - https://github.com/transmute-industries/ietf-spice-charter/pull/17
>>
>> Minute Summary:
>>
>> We discussed recent feedback on the MLS charter, and decided to remove
>> the "history section" except for the 3rd paragraph, which was proposed by @Hannes
>> Tschofenig <hannes.tschofenig@gmail.com> .
>>
>> We discussed the "Key Discovery" milestone deliverable, and revised it to
>> be "meta data discovery" and include, keys, issuer, holder, verifier
>> metadata including supported "formats".
>>
>> We discussed the possibility of including an informative use cases
>> document. There was rough consensus to omit this document from the official
>> milestones, but comments that it still might be useful as the group
>> developed the architecture, and a suggestion to perhaps put it on the wiki
>> when we have one.
>>
>> We had unanimous agreement that the 3 proposed milestones are the right
>> starting point for the charter.
>>
>> We had no additional milestones or recommendations proposed.
>>
>> There remains some concern the initial charter text is too long, see the
>> latest text here:
>>
>>
>> https://github.com/transmute-industries/ietf-spice-charter/blob/main/charter.md
>>
>> The call time remains the same until we announce otherwise, everyone is
>> welcome to attend (we are not a formal working group yet):
>>
>>
>> https://github.com/transmute-industries/ietf-spice-charter?tab=readme-ov-file#meetings
>>
>> Regards,
>>
>> OS
>>
>> --
>>
>>
>> ORIE STEELE Chief Technology Officer www.transmute.industries
>>
>> <https://transmute.industries>
>>
>>
>>
>>
>>
>
> --
>
>
> ORIE STEELE Chief Technology Officer www.transmute.industries
>
> <https://transmute.industries>
>
>
>

-- 


ORIE STEELE
Chief Technology Officer
www.transmute.industries

<https://transmute.industries>