Meeting minutes
Phil Archer: any other items for the agenda for today?
Manu Sporny: there is a discussion over the last couple weeks around payments and digital credentials
… EMVCo did a presentation at the W3C
… some of us were there and noted that there are W3C VC community members doing payments work at other organizations
… some of those other orgs are also hoping to visit on August 27th to present some of that work
… I can't make that call
… but hopefully others here can
… there are some asks from FIDO and EMVCo
… and folks here could contribute review
… as they've been asked to support W3C Verifiable Credentials
… and it would be great for us to participate
Phil Archer: is that the FedID WG call on the 27th?
Manu Sporny: yes.
<Phil Archer> The meeting Manu Sporny is talling about is https://
Phil Archer: I was under the wrong impression that it was only for chairs, but everyone is actually welcome
… I plan to be there and I hope others will join from this group as well
… there are other events this fall where various standards will be being discussed together
Ted Thibodeau Jr.: that call is actually already on the VCWG calendar
Brent Zundel: there is also a joint meeting on the Tuesday of TPAC
… if you've already registered, please consider attending that
… one of the bolded options for you should be that joint session
Phil Archer: It's 1:30 PM on Tuesday--Ireland time
… k. there's a list of things from Manu Sporny for us to go through today
task Force updates
Phil Archer: anyone else have other task force things to discuss?
Dmitri Zagidulin: the Render Method Task Force agreed to ask the main group--this one--to do a resolution to start the horizontal review for our spec
Phil Archer: Dmitri Zagidulin can you draft that?
Manu Sporny: I actually have resolutions drafted
Phil Archer: great, let's use that/those
Manu Sporny: this isn't usually how we do it, but doing one proposal would simplify things
Wesley Smith: that list should include VC Forgery Defense also
Manu Sporny: k. adding that.
Phil Archer: so, some context for those who might be need
… wide review is a W3C distinguishing feature
… we have Accessibility, I18N (Internationalization), Security, Privacy, and the TAG (Technical Architecture Group) review every standard
… these things can take a bit, so we want to start them earlier than later
… these are valuable reviews since the Web is for Everyone (per Tim Berners-Lee)
Wesley Smith: we will need to link to these minutes as part of the request to the TAG (at least) when doing horizontal review
<Manu Sporny> PROPOSAL: Request Horizontal Review for VC Rendering Methods, VC API for Lifecycle Management (VCALM), VC Barcodes, and VC Forgery Defense.
Phil Archer: Manu Sporny please post the proposal--I think we're ready to vote
<Ted Thibodeau Jr.> +1
<Dave Longley> +1
<Benjamin Young> +1
<Phil Archer> +1
<Wesley Smith> +1
<Manu Sporny> +1
<Jennie Meier> +1
<Dmitri Zagidulin> +1
<Phillip Long> +1
<Michael Shea> +1
<Brent Zundel> +1
<Kayode Ezike> +1
<Kevin Dean> +1
Phil Archer: simple resolutions only come from far too few people doing far too much work
… thank you to those who have made this happen!
RESOLUTION: The VCWG requests Horizontal Review for VC Rendering Methods, VC API for Lifecycle Management (VCALM), VC Barcodes, and VC Forgery Defense.
Phil Archer: for Wesley Smith and anyone else who needs it, there is the direct link to the vote above
<Elaine Wooton> Post link again. Please. I was disconnected.
Manu Sporny: it's good practice to register protocol and/or pseudo schemes at IANA
… we have one in VCALM called `interaction:`
… and it supports multiple protocols
<Manu Sporny> https://
Manu Sporny: this should actually help the ecosystem by building a bridges from user agents (Wallets, browsers) to various protocols
Phil Archer: this is what goes at the front of the URI?
Manu Sporny: yes
<Elaine Wooton> Add me +1
Phil Archer: is this contentious?
Manu Sporny: who knows?! We don't think so.
… the `web+interaction` URL is for web apps to be registered as Wallets
Brent Zundel: as someone who is currently going through a failing URI attempt
… I am not seeing the description of the URI itself
… I see the scheme registration, but where is the description of what the URI actually looks like?
Manu Sporny: are you asking about the ABNF?
… I thought that was not needed until the final registration, not a provisional one
<Dave Longley> https://
<Manu Sporny> https://
Manu Sporny: Kayode Ezike may know more
Kayode Ezike: we do have ABNF
Manu Sporny: we could provide that. We do have it.
Brent Zundel: all good. I just wasn't finding it.
Manu Sporny: some registrations have very little info and others have pages...so who knows how this will go
Kayode Ezike: we should probably put the full scheme names in the proposal
Manu Sporny: we mention that the spec talks about what they are
… we could make it explicit
Ted Thibodeau Jr.: yes, please do
<Manu Sporny> PROPOSAL: Request the registration of protocol schemes listed in the IANA Considerations section, that is, interaction and web+interaction, of the Verifiable Credential API for Lifecycle Management (VCALM) specification via IANA.
<Dave Longley> +1
<Dmitri Zagidulin> +1
<Brent Zundel> +1
<Kayode Ezike> +1
<Michael Shea> +1
Phil Archer: thank you, Manu Sporny
<Phil Archer> +1
<Benjamin Young> +1
<Ted Thibodeau Jr.> +1
<Manu Sporny> +1
<Jennie Meier> +1
<Phillip Long> +1
<Elaine Wooton> +1
RESOLUTION: The VCWG requests the registration of protocol schemes listed in the IANA Considerations section, that is, interaction and web+interaction, of the Verifiable Credential API for Lifecycle Management (VCALM) specification via IANA.
Phil Archer: whether you were part of the work or not, you are part of the group that approved this resolution
… I understand that folks can't be in all groups, but we do act as a group for significant actions such as this one.
test suites and implementations
Phil Archer: we're heading into a few upcoming months where test suites need expansion or creation
… with the number of things going on, it can be helpful to see who's actually using this stuff
… where can I see the W3C VC stack in the wild?
… if you have or you know of an implementation of W3C VCDM, I'd be very interested to hear about that
… so we can jot some of that down and talk about them at the conferences this fall
Manu Sporny: I can't mention all of our rollouts, but one of them is the CA DMV
… all Driver's Licenses in CA are issued both as mDL and VCs
… they also issue Vehicle Titles as only W3C VCs
… there should be upcoming news about that
… there has also been educationally focused VCs getting traction in CA
… there are a number of pilots--such as the Career Passport pilot
… MOSIP has mentioned that they have 180 million _people_ using VCs--obviously even more VCs than people
… several US states are issuing VCs for a wide range of government and educationally related use cases
<Dave Longley> additional note on CA DMV: all new physical licenses include VCBs.
Manu Sporny: CONEXSUS and NACS are releasing several VC ecosystem-based deployments
<Wesley Smith> and ID cards!
Manu Sporny: I can't share all the timelines, but "soon"
… some of this surfaces on https://
… if you look at convenience.org's list of credentials, you'll find an entire retail store story there with VCs covering things such as gift cards, loyalty cards, etc.
… and many more announcements coming in the next 6-9 months
Phil Archer: that's great data.
… does anyone else have data they can share?
<Phillip Long> I believe the California Career Passport also includes the Community Colleges and CA State University System, as well.
Michael Shea: I believe the UNTP work is getting traction in Australia
… and is moving from pilot to production in the next 12-18 months
… that's obviously outside the person identity space
Manu Sporny: thank you Michael Shea, lots more going on at the UN and in the supply chain world as well
<Phillip Long> ASU does issue W3C VC compliant OBv3 credentials as well
Manu Sporny: I also meant to call out VC Barcodes specifically
… a VC Barcode is going on all physical Driver Licenses in CA
… so VCs are in people's hands--with a 5-to-1 ratio opposite mDL technology in CA
Denken Chen: as Manu Sporny mentioned, MOSIP has lots of adoption
… we're going to propose a new task force under the CCG soon
… we're using much of this technology in our own countries
… and I'm hoping we can contribute to test suites, etc.
Phil Archer: I believe there's also work going on in Brazil?
Henrique Xavier: what I know is that there are biometric, non-VC-based private implementers
… but the government is working on a solution based on verifiable credentials
… I know VCs have been applied to giving credit to farmers, but not sure of the specifics
… and for age assurance they are using VCDM
… and also using the OID4* protocols
Phil Archer: anyone else have more to share?
… I and many others are going to be on the road talking about our work and pushing their own approaches
… it always helps to have real world use cases to present
<Phillip Long> The Alabama Talent Triade is their statewide talent markplace has the W3C VC as a core pillar of its technology stack.
Phil Archer: it provides confidence
… and in this spirit, GS1 is indeed implementing W3C VCs
… we are a federated organization, so we have to work out governance next
… also, for the Recognized Entity folks, we are planning to get our docs up to date to share with that task force
… so, GS1 is certainly on board
… which is a big deal for cross-border trade, etc.
Michael Shea: there is a great deal of activity going on with UNTP
… especially around mines
… and pilots around fashion and textiles
… and another around responsible businesses
… there's also a seafood traceability group forming
… and all these groups are bringing lots of attention to UNTP
… and UNTP is 100% W3C VC based technology
<Phillip Long> The Tennessee Board of Regents (TBR) through its CRED System (Comprehensive Record for Every Learner) uses VCDMs (via OBv3 and CLRv2s)to represent verified skills, course competencies, co-curricilar achievements and credit-for-prior-learning.
CID
Elaine Wooton: just an FYI, I'm also in the ISO groups related to this work
Phil Archer: great. I have nothing but respect for anyone working in standards
Elaine Wooton: and just so you know, folks often think I'm the liaison for the W3C--which I am not
Phil Archer: yes...similar confusions about around GS1 here
<Brent Zundel> +1 Elaine Wooton should feel free to give ISO folks an update on what we're doing
Phil Archer: Michael Shea you wanted to discuss some specific things here
<Phillip Long> The State of North Dakota issues W3C VCs to all K12 students (focused on middle and high school) and a few technical schools have joined into project managed through the State Longitudinal Data Service.
CID Issue 170 w3c/cid#170
Michael Shea: this particular one probably needs Joe to be here
Brent Zundel: this one is actually done
CID issue 167 w3c/cid#167
CID issue 165 w3c/cid#165
CID issue 166 w3c/cid#166
<Phil Archer> Benjamin Young: It's bc we're using content-based hashes, line endings and so on can change the hash. We have to look through until we find a match...
<Phil Archer> Michael Shea: That's outside my expertise - can you help please?
<Phil Archer> Benjamin Young: Has anyone gone through and checked all these? We may need to change how we share hashes so they don't get messed up.
Phil Archer: there are a couple of instances where it really matters where the hash in the spec matches
… I'm thinking the JSON-LD context file in the VCDM
… in that case, it really matters
… in the examples, I think I've seen text that says we make no cryptographic promises around examples
<Phil Archer> Benjamin Young: This is a topic in itself. Do we need non-normative hashes to be accurate?
Brent Zundel: to give some context here...no pun intended
… as we were preparing the last round of specs
<Dmitri Zagidulin> @Benjamin Young -- we really need to add a canonicalization attribute to digestMultibase..
Brent Zundel: we wanted to be able to normatively reference the context
… I don't think removing the hashes is an option
… we need to fix this one way or the other
<Dave Longley> Dmitri Zagidulin: i think that already exists, the group just didn't have consensus to use canonicalization for these hashes in the past.
Phil Archer: this maybe just needs a quick call with Benjamin Young and pchampin
<Dmitri Zagidulin> @dlogley -- what's the mechanism? multihash?
Michael Shea: I'm happy to try and set one up
Phil Archer: I know pchampin is on holiday
… but basically, it's a bit of engineering to get it right
Michael Shea: I will setup a separate call around 166
<Dave Longley> Dmitri Zagidulin: https://
<Dmitri Zagidulin> @Dave Longley -- I'm familiar with multicodec mechanism in general, I'm more asking -- does digestMultibase support that notation
<Dave Longley> Dmitri Zagidulin: yup, just use that header :) ... it's in the same namespace
<Dave Longley> (that's my understanding)
Issue 161 w3c/cid#161
<Dmitri Zagidulin> @Dave Longley -- ahaa that's good. so we should bring up the issue to the group again. I suspect we can arrive at consensus now
Michael Shea: does this look closable?
Phil Archer: Michael Shea I would add the key people for CID as reviewers
<Dmitri Zagidulin> oh FANTASTIC news
<Phil Archer> Benjamin Young: The JSON-LD WG, which is meeting at TPAC, is having a very similar discussion about hashes
Phil Archer: thank you everyone and Benjamin Young for scribing
… Jennie Meier is up next for scribing
… thanks all, bye
<Peter> quit