decentralized-identity / SIG-IoT

DIF IoT Special Interest Group (Open Group)
https://identity.foundation/SIG-IoT
Apache License 2.0
4 stars 4 forks source link

White paper - DIDs/VCs & X509s #17

Open mxshea opened 1 year ago

mxshea commented 1 year ago

X509s are well entrenched in many parts of the IoT sector. Over the past few years replacement of X509 certs with VCs has been promoted/presented as a better solution, but what 'better' means has remained fuzzy.

To create a whitepaper outlining the existing X509 processes used in industry (eg energy, automotive), how they are issued, what they are issued for, how they are updated, how they are revoked and compare this to DIDs & VCs, how they are created, what used for, how updated, revoked, keys rotated. Define and outline the differences between the two technologies and identify the potential value differentiation areas.

mxshea commented 1 year ago

For reference: https://arxiv.org/pdf/2003.05106.pdf

paulgrehan commented 9 months ago

Can we update this to DIDs/VCs & X509 ? This is definately a transition so needs to focus on how best to approach this (IMHO). Let me know if you want to kick someting off here @mxshea 👍

mxshea commented 9 months ago

@paulgrehan let's aim for the second half of the month to start hacking at this. If you have any thoughts on the structure of the approach plonk them in here.

jstclair2019 commented 1 month ago

@mxshea did this come to fruition? I was reading this report today and feel it's an itch that needs to be scratched. state-of-machine-identity-management-2023-keyfactor-ponemon.pdf