Open jandrieu opened 1 month ago
Yes, it's an opaque name but it's a name that's been in use. Unless a clearly better name is found, I think we are where we are.
The issue was discussed in a meeting on 2024-09-27
What about "interaction documents" -- they contain ways in which one can interact with an entity that is identified by the identifier in the id
field?
Here's how we'd change the abstract with the new name:
An interaction document provides information that enables a software system to engage with an entity identified in the document. An interaction document contains data to aid in the interaction such as public cryptographic keys that can be used for secured communication and services that can be used to interact with software acting on behalf of the entity identified in the interaction document.
It's not perfect, but is it better than "controller document"?
It's not perfect, but is it better than "controller document"?
I agree with both statements :-)
But... what is the usage of that document without public crypto keys? I have the impression that most of the properties are related to "verification", the data types that we define are related to keys, etc. So the "such as" in the description seems to underplay the role of crypto for my taste.
I believe the presence of crypto keys are an essential feature of the document, and this should be reflected in the name...
I believe the presence of crypto keys are an essential feature of the document, and this should be reflected in the name.
It's an essential feature today, but it's not absolutely necessary for some use cases. I know this is going a bit far afield into the Social Web space, but that is one of the driving "next generation" use cases for DID Documents.
But... what is the usage of that document without public crypto keys?
You can list services, such as ActivityPub inbox, pseudonymous email address, DID Comm endpoint, or other URLs that the entity identified by the id
property has listed as ways of interacting with them. For example, if I just want to drop a message to you, I could HTTP POST to one of those endpoints, authenticating myself in the process (if necessary).
But... what is the usage of that document without public crypto keys?
A direct-dial phone number might be another useful and reasonable inclusion. Possibly through a location-blurring reflector like Google Voice. No crypto keys required, unless you're on some kind of secure line, which case you're probably not using GV but you might be using a No Such Agency reflector.
I continue to like Identifier Document.
Since the main impetus (I think) was to move from just a DID Document to other types of identifier-based documents, cutting off decentralized is a simple and consistent change.
I'm sorry, I could not resist adding another proposal identity manifest
even though I'm quite cool with controller documents
:)
The issue was discussed in a meeting on 2024-10-09
Seems like "identifier document" was the only new name to get more than one vote in the call.
After sitting on it, I would support that.
'Identifier Manifest' is also not bad, although I'm not a fan of 'identity manifest' given the challenges defining 'identity'.
I look at Example 2 in the DI document for the value of proof
, and it is not clear how the term identifier document
(or controller document
for that matter) would characterize what is there. The properties used in proof constitute a set of data on the proof, which "identified" by a… blank node. Is that ok for an 'identifier document'? Not sure.
I am the culprit in this issue insofar as I raised the question at the F2F meeting in Anaheim. And I have to acknowledge that there is no name coming to the fore that would reflect a consensus of everyone around; so we may want to accept failure. 😞
As for 'document' vs. 'manifest': I would be fine with 'manifest' but, alas!, that term is tainted by the introduction of the Web Manifest Standard at W3C. If we used that term, we would be flooded by questions like "What is the difference with Web manifest?", "Can't you reuse the Web manifest", etc. (Saying this as a co-editor of a standard entitled "Publication Manifest".) I do not think we want to go there.
@iherman Do you mean W3C Web Application Manifest
? If yes, actually, thinking about it more, a clash leading to a discussion on how a Web Application Manifest
is related to what is now called Controller Documents
could be quite interesting and useful to clarify things. However, this is not the goal of this spec.
Web Application Manifest Abstract
This specification defines a JSON-based file format that provides developers with a centralized place to put metadata associated with a web application. ...
Controller Documents Abstract
A controller document is a set of data that specifies one or more relationships between a controller and a set of data, such as a set of public cryptographic keys.
How would the abstract look like for a new name? Would it change, become more concrete, vague, etc?
-- A side note: there are more perspectives than just factual correctness, e.g. marketing, PR, a subjective perception, "coolness" :slightly_smiling_face: ...
@decentralgabe wrote:
I continue to like Identifier Document.
I'm starting to come around to this as well, I don't love it, but it feels more descriptive than Controller Document. The part of it that I don't like is "Document" and wonder if "Description" might be better?
"Identifier Descriptions v1.0" or "Identifier Description Documents v1.0"?
The document certainly contains a description of an identifier. I do get the parallel to "Decentralized Identifier Document", and for that reason wouldn't -1 "Identifier Documents v1.0"
Another possibility is "Cryptographic Identifiers v1.0"? Decentralized Identifiers are a type of Cryptographic Identifier?
@iherman Do you mean
W3C Web Application Manifest
?
My apologies, I was not precise. Yes, that is the one I referred to.
If yes, actually, thinking about it more, a clash leading to a discussion on how a
Web Application Manifest
is related to what is now calledController Documents
could be quite interesting and useful to clarify things.
That discussion would easily become a time and energy sink. Issues that would become the subject of discussions are JSON-LD vs. "basic" JSON (knowing that there are experts in the WAM area that are fiercely opposed to -LD); is this document for Web Applications?; Is a VC part of a Web Application? etc.
I personally would like to avoid going there. It would derail the timeline along this document, which would drag down all VC specs.
-- A side note: there are more perspectives than just factual correctness, e.g. marketing, PR, a subjective perception, "coolness" 🙂 ...
+1
Another possibility is "Cryptographic Identifiers v1.0"? Decentralized Identifiers are a type of Cryptographic Identifier?
I always emphasized my feeling that a reference to crypto should be part of the name, so that sounds better to my ears.
That being said, my comments on the example in https://github.com/w3c/controller-document/issues/100#issuecomment-2408945838 still holds. However, my comment may fall under the remark of @filip26:
A side note: there are more perspectives than just factual correctness, e.g. marketing, PR, a subjective perception, "coolness" 🙂 ...
as an issue of "correctness"…
The new (and significantly improved) introduction to the spec offered in PR #102 adds support that "controller document" isn't necessarily that bad of a name:
A [=controller document=] contains cryptographic material and service endpoints for the purposes of verifying proofs from, and interacting with, the [=controller=] of an identifier.
Each of the other names offered thus far have pros and cons -- and given that none of them, IMO, is overwhelmingly "better", I think we should stay the course with "controller document" and save the effort involved in changing the name and then defending it again from future changes.
EDIT: If we really are hard set on changing the name, I think this is a good combination of what I've heard here:
"Identifier Controller Document"
For the records, see also @David-Chadwick 's comment https://github.com/w3c/controller-document/pull/102#issuecomment-2410572163
For the records, see also @David-Chadwick 's comment #102 (comment)
I like having crypto in the name, unfortunately CID collides with Content IDentifiers - e.g. Bluesky uses CIDs in production alongside with DID documents.
+1 to Cryptographic Identifiers
Cryptographic Identifiers would also work in the opening sentence, viz:
A Cryptographic Identifiers (CI) document contains cryptographic material and service endpoints for the purposes of verifying proofs from, and interacting with, the controller of an identifier."
Is the abbreviation CI acceptable?
The name "Cryptographic Identifiers" still seems suboptimal to me -- as the identifiers aren't cryptographic and one of these documents may even contain no cryptographic material (e.g., services only).
@dlongley you're correct, but why should that be allowed (I know why historically)? I can put a service in a document today, I don't need a spec for it. The introduction of cryptographic material is what makes these documents meaningful.
@decentralgabe,
Another case is a document with a verification method that doesn't use cryptography (or may not express it publicly).
I disagree that the only value (or primary value) is in expressing cryptographic material. From my perspective, the value is in having a standard way to express information for verifying proofs created by the controller of an identifier and in finding ways to interact with the controller of an identifier. This, to me, puts an emphasis on the identifier and its controller, not elsewhere.
What about Controllable Identifiers
? i.e. identifiers that are under control via crypto, services, etc.
I disagree that the only value (or primary value) is in expressing cryptographic material. From my perspective, the value is in having a standard way to express information for verifying proofs created by the controller of an identifier and in finding ways to interact with the controller of an identifier. This, to me, puts an emphasis on the identifier and its controller, not elsewhere.
We agree here—I missed some nuance. Verifying proofs requires cryptographic material. No matter what, interacting with a controller document requires some cryptographic material (I believe it should, anyway). Identification, control, and verifiability is the crux of the issue.
The issue was discussed in a meeting on 2024-10-16
I'm going to run a Ranked Choice Vote poll for picking a name after the call today. The options will include (am I missing any?):
Are there other options that should be considered?
NOTE: I've updated the list based on comments below (up to https://github.com/w3c/controller-document/issues/100#issuecomment-2432735899)
Verification Documents
- Cryptographic Identifiers (shortened to "crid" in discussions to avoid conflicting w/ IPFS "cid")
I'm so tempted to push for "cryptid" as the abbreviation because "a cryptid is an animal that is claimed to exist but has never been proven to do so". But I'll satisfy myself with voicing my temptation.
Please add Documents after the last entry, Cryptographic Information
@msporny — @David-Chadwick requested addition of Documents
to the last (i.e., make it Cryptographic Information Documents
), and I think similar should probably apply to Controllable Identifiers
... and I think both Cryptographic Identifiers
and Controllable Identifiers
should be singular when followed by Documents
(i.e., Cryptographic Identifier Documents
and Controllable Identifier Documents
).
The poll to gather WG preferences is now open here and will be open until our next WG call, at which point it will be closed.
I see it's too late, but wanted to add a viewpoint form a less involved person's perspective and submit:
Identifier's Authentic Metadata Graph.
To shift the focus to the purpose of the Controller Document. In my view, I most value the properties that allow an RP/verifier to establish confidence about the authenticity of a claim to the identifier --over time-- and an asserted way to initiate communication with the claimant. It forms the basis by which an RP/verifier can establish confidence about the authenticity of the claimant in online interactions or authenticity and temper-evidence in data the claimant choses to originate (VC and beyond).
@steatcal wrote:
I see it's too late
It's not too late, we can always provide this other choice as a: "Here's all the data we have, and X seems to be in the lead... Stephan provided another option after the poll started, is there stronger support for that choice vs. the ones we have data for?" <-- that's typically what we do when we make the final decision (2 weeks from now).
open until our next WG call
@msporny — Could you put an actual closing date on this, optimally also on the poll page? (and change the text quoted above to reference the VCWG, which I think is the WG controlling (cough) this document, maybe with a link to the WG calendar or even the specific meeting event?
Closing date is next Wednesday after the VCWG call.
I can't put it on the polling page w/o closing the poll (they don't want you to change instructions/dates/etc. mid-way through the poll, IIRC).
The issue was discussed in a meeting on 2024-11-13
Closing per discussion on the last WG call.
Here are the results from the poll (for posterity):
... and the text-based breakdown:
OpaVote Election Results (https://opavote.com/)
A Poll to Rename the Controller Documents Specification
There are 12 candidates competing for 1 seats. The number of voters is 21 and
there were 21 valid votes and 0 empty votes.
Method Options:
Ballot Completion -- Off
Counting votes using Borda Count.
Candidate | Count
===========================================
Controller Documents | 113
Identifier Documents | 129
Identifier Controller Documents | 72
Cryptographic Identifiers | 57
Cryptographic Identifier Documents | 96
Controllable Identifiers | 59
Controllable Identifier Documents | 79
Identity Manifests | 41
Identifier Manifests | 67
Interaction Documents | 64
Verification Documents | 52
Cryptographic Information Documents | 51
Exhausted | 506
Borda count totals.
Winner is Identifier Documents.
@msporny can you easily run a rank choice vote so we only have two options left?
@msporny can you easily run a rank choice vote so we only have two options left?
I could re-tally as a variation of RCV, though Borda count was the more appropriate voting scheme for this particular choice:
https://opavote.com/methods/ranked-choice-voting
If we did many of the variations of RCV, the remaining two would be Identifier Documents and Controller Documents, w/ Identifier Documents winning in most (but not all) cases.
That said, there was weak support to change the name during the telecon with multiple parties claiming that they didn't care about the outcome. It became obvious that we couldn't get to strong consensus on the name change, so we closed the issue and moved on.
I dispute the fact that there was weak support to change the name. If you read the minutes there was overwhelming support for a name change, with only 0.7 against. With @dlongley's change to 0, we have 5 for, 3 dont care, 0.7 against
I dispute the fact that there was weak support to change the name. If you read the minutes there was overwhelming support for a name change, with only 0.7 against. With @dlongley's change to 0, we have 5 for, 3 dont care, 0.7 against
There was never a claim of weak support to change the name. There is very clearly strong support to change the name. Unfortunately, W3C process calls for more than strong support. It calls for unanimity where possible (everyone in favor), where that is not possible a chair can declare consensus as long as there aren't too many abstentions and there aren't any objectors. -0.7 isn't much, but it is still an objection and therefore we did not have consensus.
However, in light of the strong desire of some members of the group to continue working toward consensus on this issue, I will re-open it.
I believe that changing the name would cause more confusion than benefit. I believe that @brentzundel already made the best call available to us.
@msporny "That said, there was weak support to change the name during the telecon" @brentzundel "There was never a claim of weak support to change the name. " Perhaps you guys could reconcile your opposing views?
@David-Chadwick
Perhaps you guys could reconcile your opposing views?
I'm conflicted about the resolution, and my view isn't necessarily in opposition to @brentzundel's call -- I think there was a judgement call that had to be made and the Chair made it. I accepted it and moved on; other's didn't. :)
I can see both sides of the argument. It is true that there wasn't strong consensus. It is also true that there weren't sustained objections that would lead to a formal objection. I both agree and disagree with both @brentzundel and @jandrieu :) -- it was a tough call. The resolution would have passed at IETF, it was not strong enough to pass at W3C.
But that's neither here nor there, the topic has been re-opened and will be discussed until we can move forward without a formal objection, or until it's clear that we can't do that.
When we open up the discussion again, it would be good to understand what we'd need to see in the data / proposal to know if the proposal passed or not (as horribly meta as that is).
There is one item that Dave Longley mentioned around "identifier document" being a mistake that we didn't have the time to discuss (could be considered "new information"). At the time, I didn't understand his point and that might help push other people one way or the other on their decision.
My biggest concern at this point is the extra time this is going to add to get to CR and beyond, as I'm sure that concern is shared by a fair number of people in the WG.
The "controller" document is a bit of a challenge to understand.
We should consider other names that better describe what it actually does.