2025-02-20 HAVID TF NA/EU Meeting Notes
Feb 20, 2025 This Task Force meets weekly every Thursday/Friday. It alternates between two times to maximize global coverage:
NA/EU Meeting: 10:00-11:00 PT / 13:00-14:00 EDT / 18:00-19:00 UTC / 19:00-20:00 CET / Friday 01:00-02:00 AEST
APAC Meeting: 14:00-15:00 PT / 17:00-18:00 EDT / 22:00-23:00 UTC / 23:00-24:00 CET / Friday 09:00-10:00 AEST
See the Calendar of ToIP Meetings for exact meeting dates, times and Zoom links.
Zoom Meeting Links / Recordings
NA/EU Meeting: LFX Meetings
APAC Meeting: LFX Meetings
NOTE: This Zoom meeting link will be replaced by a link to a recording of the meeting once it is available.
Attendees
Agenda Items and Notes (including all relevant links)
Time | Agenda Item | Lead | Notes |
3 min |
| Chairs |
|
20 min | Review of spec updates | Leads | Link to spec: https://docs.google.com/document/d/1BVmciUxNsolRMknz3dws0dgYFfgwKLOTHRKuVb-Vazo/edit?tab=t.0#heading=h.u9t084b0ygnz |
20 min | Update main diagram |
| Review new diagram of DIDs and X.509 |
|
|
|
|
LEI Spoofing:
Scott: CAs do very similar types of verification to LEI registrars
Example, validate a domain is owned by a legit company
Drummond how is that prevented?
Unclear
Scott: Validation is up to the verifier
CAs have the choice to do more than what they already do
Drummond: LEI Spec says there is no standardized way for an organization to prove that it actually is the organization that owns the LEI.
Scott: Gleif validates the LEI / CA validates the private key
It’s a 2 step verification process
2 Verification Methods:
Markus: Why 2 verification methods?
Can cause confusion
Should be in 1 verificationMethod
Universal Resolver Example of general certificate chain
Scott: key is the bridge
Scotts Section on Profiles:
Subsection for certificate profiles
Needs more clarity for the individual relationships
Markus contributing to the resolution process:
Existing work, parameters, error codes etc.
Drummond to ask Carla:
Can you resolve an LEI outside of the LEI infrastructure?
How do you verify this? Publicly available registry