w3c-ccg / security-vocab

The Linked Data Security Vocabulary
https://w3id.org/security
Other
21 stars 21 forks source link

Missing documentation for security:contoller #114

Open bblfish opened 3 years ago

bblfish commented 3 years ago

There is no documentation for the "controller" property that is used in a very large number of examples in the security vocab. It is given a namespace in the v3 namespace json-ld giving it the URLhttps://w3id.org/security#controller.

My guess is that it relates key material to the agent that knows the private key of the published public key.

We have a use for this in Solid, and I have written up here how I propose we use it: JWK in Access Control. So I wanted to check here if the interpretation of the relation I was guessing at was correct, and of course it would help if that were specified in writing in the spec.

bblfish commented 3 years ago

is security:controller the same as did:controller from the [did specification])(https://www.w3.org/TR/did-core/#dfn-did-controllers)? Is there an equivalent security:subject?

Mhh: I see that the did namespace document assigns "controller" to <https://w3id.org/security#controller> so they are the same. So the problem is that by following one's nose one does not end up at the did specification.