Removed references to TLS as primary auth method

solid / solid-spec

Solid specification draft 0.7.0

Creative Commons Zero v1.0 Universal

1.13k stars 103 forks source link

Removed references to TLS as primary auth method #171

Open jaxoncreed opened 5 years ago

jaxoncreed commented 5 years ago

TLS as a primary form of authentication should be deprecated in favor of a oidc. TLS may still be used as a form of credentials under oidc. All concerns about needing completely decentralized identity systems will be solved with an eventual implementation of DiD.

RubenVerborgh commented 5 years ago

Not opposed, just checking if this has been checked with @timbl?

jaxoncreed commented 5 years ago

@RubenVerborgh I'm going to submit this for discussion at the w3c working group meeting too, so we'll have plenty of time for input.

elf-pavlik commented 5 years ago

:+1: and if this PR will not land this month it should at least get marked with at risk

michielbdejong commented 5 years ago

Feedback we got from @timbl and @kidehen (in my own words): webid-tls should still be mentioned as a 'MAY' for client-storage, and as a 'SHOULD' for user-IDP login method ('openid + TLS bridge')