-
Notifications
You must be signed in to change notification settings - Fork 9
2024 03 11 Meeting Notes
Organizer: Tim Cappalli
Scribe: Lee Campbell
- Administrivia
- Planning to cancel the next call (3/20) due to IETF conflicts
- Tomorrow is W3C Breakouts Day (3/12). Sessions of interest:
- Request to re-evaluate meeting schedule
- Follow up discussion for query syntax
- Federated Identity WG work item
- IIW session planning: IIW Spring 2024 - DC Session Planning
- Lee Campbell(Google/Android)
- Tim Cappalli (Okta)
- Loffie Jordaan (AAMVA)
- Ryan Galluzzo (NIST)
- Wendy Seltzer (Tucows)
- Oliver Terbu (MATTR)
- Orie Steele (Transmute)
- Rick Byers (Google Chrome)
- Manu Sporny (Digital Bazaar)
- Andrew Regenscheid (NIST)
- Tom Jones
- Tim Shamilov (Block)
- Hicham Lozi (Apple)
- Mike Jones (independent)
- Gail Hodges (OIDF)
- Nick Doty (CDT)
- Sam Goto (Google/Chrome)
- Gareth Oliver (Google)
- Sebastien Bahloul (IDEMIA)
- Marina Ioannou (Scytales)
- Torsten Lodderstedt
Tim: No call 3/20 due to IETF conflicts
Tim: Online W3C breakout sessions 3/12. Highlighting 4 sessions relevant to us. (see the agenda above for the links). Notes will be shared. No recordings
Tim: Had requests to re-evaluate call times. Kristina: One of the calls is not EU friendly. Can we shift it a few hours earlier? Would still be late for the EU, but it makes it possible for people who really want to attend.
Rick: Will try accommodate, but folks need to vote in the doodle
Mike: US just moved daylight saving, so things will be off for a few weeks
Rick: Target the doodle poll for a B call starting after Apr 1st, when EU/NZ change to DST
Tim: We keep A call as-is
Tim: Still figuring out where the document should live. Not everyone can join OpenID quickly, but they are here.
Manu: No need to delay other query language specs on this
Torsten: If its part of OpenID4VP it should be in the OpenID4VP working group. Overly focusing on the query language, there are more important things to standardize on (e.g RP authentication etc..)
Sam: Browsers want to look into these requests, so it is important to discuss this stuff.
Torsten: What is the role of the browser here and the split of the responsibilities. Who decides what formats can play
Sam: Yes we want a small number. There is a trade off and there will only be a handful the browser understands. And things browsers can’t understand has more friction.
Rick: Chrome doesn’t want to block requests - will allow everything. More just heuristics and risk based analysis to change the UI friction.
Manu: +1 Sam and Rick, 1 query language is not going to work for 20+ formats. RE: acceptable tradeoffs, one is to see a warning when the browser doesn’t recognize something. Every format having its own QL decouples the format and allows communities to work on something themselve. Nothing to say that different formats won’t share the same query language.
Torsten: Not sure why the number of formats we have today implies we need per format query languages
Tim: This could be a dedicated item
Manu: Folks don’t like Presentation Exchange. Implication is complexity is coming from the goal of being format agnostic. It could be simpler to do format specific languages and this may cause a explosion of formats
Kristina: Not all of the complexity goes from being format agnostic. Can look at the mdoc profile as a way to reduce the scope of PE
Oliver: Query Specific Languages make sense as they simplify things. Please read the doc for explanations. e.g Mdoc have mdoc specific things, like namespaces etc.. But there is a challenge that we dont have an explosion of languages, so we need to figure that out
Rick: We don’t want the browser vendors/W3C to be king makers in this space. OpenID4VP is likely the right venue to define the query language
Torsten: Would like to have the query language conversation at OpenID and folks are welcome to attend.
Martijn: If its just OpenID4VP related it might be ok, but if the only language we support it might be an issue.
Manu: There are quite a few formats not related to OpenID, so disagree with everything being discussed there. There is a meta thing on top which allows you to query for say an mdoc or a VC, that should belong in the W3C. But the query at the format level could live outside.
Nick: I care about how this is presented to the user and they need to understand the consent. Will be hard to be consistent here if the query languages are defined in many different forums.
Torsten: The protocol field is the current switch in the Digital Creds API. Not sure we need anything else?
Orie: If its the case that browsers will understand the query languages, then does writing WebIDL for the query language become important
Tim:: Where does OpenID Foundation think this should live?
Mike: Not clear if it’s ok to use something produced in a community group in OpenID specs. OpenID aims to make everything usable by all. So the clean path is to do the work there.
Gail: Just need to sign contribution agreements (Lee: I think). Reach out to Gail if you want to know more details and happy to work with folks and be supportive. Federated Identity WG
Tim: Background. Original thinking was that the Federation work had already incubated for many years it was decided for it to go to a WG. We left this work out of that because this hadn’t incubated long enough. We decided to use the WICG. Federated WG charter has gone for review. There were comments suggesting that work from this group could be included, or at least not actively not excluded. Pull request suggestions ‘Should be listed explicitly, so we wouldn’t need to recharter’. Please give feedback to the PR
Manu: We would not have approved the group with this item included. Think its dangerous to not have AC review. Recharting is a pain but not impossible. If it goes in now it would be without the AC having seen/commented on it. Wouldn’t want this. Seems like a bad idea to make the change at this point. Manu would likely object if it did go for AC review due to lack of incubation
Nick: Also agree its not appropriate to make this change after an AC review that specifically didn’t include this work in its charter. It’s a large and new fundamental API so it needs appropriate review. Suggest working on the scoping and figuring out what is proposed to the AC and we can recharter when ready
Wendy: Speaking as a chair of the proposed group. Deliverable from this group could be used to seek the formal support for inclusion in the charter
Tim: Pointing out Torsten wants us to consider issuance.
Tim: Let's coordinate on the doc to figure out sessions. IIW Spring 2024 - DC Session Planning