WebOfTrustInfo / btcr-hackathon-2017

Virtual hackathon to create spec and code for Bitcoin-based Decentralized Identifiers (DIDs)
https://weboftrustinfo.github.io/btcr-hackathon-2017/
14 stars 7 forks source link

Insight for DID spec: proofs, not keys #39

Closed ChristopherA closed 7 years ago

ChristopherA commented 7 years ago

An insight from the work this week is we should not be talking about owner key, or control key, etc.

Instead, we should be talking about proofs.

For instance, this fragment from a DDO

{ "control": [{ "control-bond": 1.25 "rotate-proof": [{ "proof-type": "pubkeyhash", "bond-value": 1.25 "hash-base58check": "mvZ3MyLgsvYr87GGSbsPBWEDduLRptfzEU" }] },{ "revocation-proof": [{ "bond-value": 1.25 "proof-type": "pubkeyhash", "hash-base58check": "mvZ3MyLgsvYr87GGSbsPBWEDduLRptfzEU" }] }

It basically says that for control (which permits rotating the owner key and the DDO address) that there are two subtypes, a rotate proof and a revocation proof. In another ddo system the proof-type could be "signature", or even "revocation list".

Similar with owner (which permits updating of the keys allowed to issue claims, and the other content of the DDO, but not the control key or the DDO address), it can be proofs as well which may not just be signatures.

cc: @talltree @msporny @dlongley

kimdhamilton commented 7 years ago

TODO: insights and links from BTCR hackathon

ChristopherA commented 7 years ago

I started this at https://github.com/opencreds/did-spec/issues/4#issuecomment-315449659

I'd like to see a paragraph or so from each of us of top lessons learned, and important links to code, text, or issues contributed to.

msporny commented 7 years ago

I suggest we start moving a lot of these issues to the DID spec issue repository. @talltree, @dlongley, and I met in DC this past week to go through a revision of the DID spec that Digital Bazaar needs so it can align it w/ our implementation and thinking. I expect this will be an area of focus at the next RWoT.

Specifically, a capabilities based security model for DDOs and what you can do w/ keys associated w/ DIDs.

ChristopherA commented 7 years ago

Moving these issues is in progress — many of the issues from this hackathon have already been moved there. @kimdhamilton found a useful tool that moves them intact.

talltree commented 7 years ago

Christopher and Kim,

I'm glad to see these issues move to the DID spec issue repository. Are you planning for these to start being discussed on the weekly calls, or should we start planning a dedicated weekly or bi-weekly called on the DID spec. There is a lot of work to do here and implementations are already underway, which creates pressure to do it quickly.

Thanks,

=Drummond

On Sun, Jul 16, 2017 at 9:21 PM, Christopher Allen <notifications@github.com

wrote:

Moving these issues is in progress — many of the issues from this hackathon have already been moved there. @kimdhamilton https://github.com/kimdhamilton found a useful tool that moves them intact.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/WebOfTrustInfo/btcr-hackathon/issues/39#issuecomment-315652512, or mute the thread https://github.com/notifications/unsubscribe-auth/ADLkTRPzv5-i1LImiRTdzrqxanrul4Nvks5sOrcXgaJpZM4OX7HS .

kimdhamilton commented 7 years ago

I'm open to both. Btw, tomorrow we have about 15 minutes that you (and/or Manu) can spend on DID topics as you see fit. Given the priority of this spec, I imagine we could carve out a large amount of time for the weekly meeting on an ongoing basis. As the year proceeds, we could juggle the weekly meeting focus.

It's possible that even this won't be enough, so we could have either dedicated recurring or off-by-one meetings as well.

@ChristopherA what do you think?

talltree commented 7 years ago

Kim, thanks. Evernym has a company summit this week so my time on the call tomorrow will be limited. I'll try to get on the chat and watch for it on the agenda so I can be sure to join for that segment at least.

=Drummond

On Mon, Jul 17, 2017 at 3:34 PM, Kim (Hamilton) Duffy < notifications@github.com> wrote:

I'm open to both. Btw, tomorrow we have about 15 minutes that you (and/or Manu) can spend on DID topics as you see fit. Given the priority of this spec, I imagine we could carve out a large amount of time for the weekly meeting on an ongoing basis. As the year proceeds, we could juggle the weekly meeting focus.

It's possible that even this won't be enough, so we could have either dedicated recurring or off-by-one meetings as well.

@ChristopherA https://github.com/christophera what do you think?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/WebOfTrustInfo/btcr-hackathon/issues/39#issuecomment-315858462, or mute the thread https://github.com/notifications/unsubscribe-auth/ADLkTTM7rU_eap54qVLp3Q9fBp990mVxks5sO7dWgaJpZM4OX7HS .

kimdhamilton commented 7 years ago

This issue was moved to w3c/vc-data-model#62