Closed ghost closed 3 years ago
DID core Currently does not support combinations of: threshold based multi-party signature authorisation scheme, delegated authorizations
As outlined in https://github.com/w3c/did-core/issues/693#issuecomment-784229293 and https://github.com/w3c/did-core/issues/694#issuecomment-784242660, the Working Group has been feature frozen since July 2020 and won't be adding new features to the specification at this point in time. The good news for you, though, is that the spec already supports extension points for new Verification Methods supporting multisig, and at least 3 different types of delegation and/or the particular type of delegation you want can be done external to the DID Core specification as an extension. For these reasons, I'm marking this issue as pending close -- please feel free to disagree with any of the above and provide rationale for why you'd like to keep this issue open.
@gimly-jack, the Chairs and Editors discussed this on our weekly call. @peacekeeper will provide feedback through the DIF group you're in on Monday. We will most likely close this issue on the Tuesday call (for the reasons cited above), but welcome you to join the weekly call next Tuesday at 11am ET so we can provide the rationale above to you in person. We have an absolutely packed Agenda, and your attendance is optional, so won't be able to spend a ton of time on your issues, but wanted to extend the offer to you as a professional courtesy. Send me an email at msporny@digitalbazaar.com
for the telecon connection information. As an alternative, if you feel the issues are resolved on the Monday DIF call, you can relay your thoughts via @peacekeeper.
@gimly-jack based on today's DIF call, are you okay with closing this, and working on a new crypto suite / verification method that implements this functionality instead?
Closing per consensus after discussion on yesterday's DIF I&D WG call. Also see https://github.com/w3c/did-core/issues/697.
The issue was discussed in a meeting on 2021-03-02
Backgroud See issue #693 goes through the multi-sig support of DID core with an EOSIO use case. See issue #694 goes through the delegated authority of DID core with an EOSIO use case.
Problem DID core Currently does not support combinations of
Use case example - EOSIO account One use case for this is support for the EOSIO DID spec, where accounts have hierarchical trees of threshold based authoritizes including multi-sig and delegated authority. eoscanadacom is an example account showing this key structure on the EOS public blockchain, which uses the EOSIO protocol.
Example EOSIO account permission
EOSIO account DID Document - Proposal 1
For a tx/event using the above DID verificationMethod to be valid it would need to do one of the following:
Notes
More info This issue will be discussed at the ID Working Group meeting on 29 Feb.
For more information, check out these slides which go into this specific EOSIO use case: https://docs.google.com/presentation/d/1vrmdOnN1tiE54e8h7HyegkJUGyrBUITVFNsAVedUwTE