/
2023-03-09 TRTF Meeting Notes

2023-03-09 TRTF Meeting Notes

Mar 23, 2023

Meeting Date

  • Mar 9, 2023 The ToIP Trust Registry Task Force (TRTF) meets weekly twice every Thursday at the following times (to cover global time zones - see the Calendar of ToIP Meetings for full meeting info including Zoom links):

    • NA/EU 07:00-8:00 PT / 15:00-16:00 UTC 

    • APAC 18:00-19:00 PT / 02:00-03:00 UTC

Zoom Meeting Link / Recording

Attendees

NA/EU Meeting

  • @Darrell O'Donnell

  • @Antti Kettunen 

  • @Andor 

  • Clare Nelson

  • @sankarshan 

  • @mathieu 

  • @Kaliya Young 

  • @Michael Palage 

  • @Scott Whitmire 

  • @Sam Curren 

  • @Jacques Latour (Deactivated) 

  • Hadrien Seymour-Pro

  • @Neil Thomson 

  • @Viky Manaila 

  • @Scott Perry 

  • @Savita Farooqui 

  • @Tim Bouma 

  • @Darrell O'Donnell 

  • @Christine Martin 

  • @Drummond Reed 

  • @Lucy Yang 

  • @Daniel Bachenheimer 

  • Abbie

APAC Meeting

  • @Darrell O'Donnell

  • @Andor 

  • @Drummond Reed 

  • @Daniel Bachenheimer 

  • @sankarshan 

  • @Dima Postnikov 

  • @Neil Thomson 

Agenda Items and Notes (including all relevant links)

Time

Agenda Item

Lead

Notes

5 min

  • Start recording

  • Welcome & antitrust notice

  • Introduction of new members

  • Agenda review

Chairs

  • Antitrust Policy Notice: Attendees are reminded to adhere to the meeting agenda and not participate in activities prohibited under antitrust and competition laws. Only members of ToIP who have signed the necessary agreements are permitted to participate in this activity beyond an observer role.

  • New Members:

10 min

Review of previous action items & key discussions

Chairs



10 mins

Presentation

@Darrell O'Donnell 

Darrell said he is consolidating some concepts together and presentings shortly.

  • Concept separation

    • Difference: Technology, Governance, and Ops

  • Tim: 

    • We've been looking at things a little too narrow.

    • Delegations

      • Responsibility vs. Accountability

      • Accountability vs. Authority

    • Flip the question around:

      • Do I trust this becomes is this properly delegated?

  • Scott: 

    • Is verify a role or an operation provided by the network? If the former, we now have to establish trust for the verifier. If the latter, it’s baked into the infrastructure and hard to attack.

    • This is why we we defined an administrator as a proxy for a governing authority.  The term Operator does not connotate accountability.

  •  Neil:

    • Other Key TR/EGF roles: Auditor

    • Other TRs.

    • How do EGF's talk to another? What do they need? Link in the DID Document. 

  • Savita:

    • Definition of governance vs. operations needs to be clarified. 

    • Dictionary definition: direction and control

  • Note: 3rd generation will be generated 

    Additional diagram

30 mins

Requirements gathering

@Antti Kettunen 

Continue gathering requirements for the Trust Registry proposals. We'll be working in PR#80 https://github.com/trustoverip/tswg-trust-registry-tf/pull/80 

  • Andor: cares about prioritization requirements relative to a goal. 

  • Scott: common set of objectives. 



5 mins

  • Review decisions/action items

  • Planning for next meeting 

Chairs



Screenshots/Diagrams (numbered for reference in notes above)

#1



### Proposal Section

STRAWMAN of TRTF Objectives:

  • Objective:

    • Timeline Objectives:

    • Adoption Objectives:

    • Technical Objectives: 

      • The primary objective of this Task Force is to develop the ToIP Trust Registry Protocol as a ToIP Specification. The purpose of this deliverable to enable interoperability between ToIP-compliant trust registries.

      • Drummond: “…trust registries as authoritative sources of the data necessary for the members of a digital trust ecosystem to make trust decisions about other members of that digital trust ecosystem or other digital trust ecosystems.”

  • Principles

  • Architecture and Implementation Implications

  • Comments/Thoughts:

    • Sankarshan: Do timelines and adoption need to be in the charter?

    • Dima: What's missing is a definition of what a trust registry is. What should be inside of the TR. 

    • Neil: Technical Objectives -> Project Objectives -> Technical and Governance Specifications

    • Drummond: Charter not explaining what problem TR is solving. 

    • @Jo Spencer : Need more anchors 

      • Equivalence of data

      • Rules

    • @Daniel Bachenheimer : Is this primary objective TF : to define TR vs. TRP. 

      • @Jo Spencer TRP is an output

      • @Daniel Bachenheimer x509 Certs to reference. 

    • @Drummond Reed : is CA a type of TR?

  • @sankarshan : My hunch is that if the following can be clearly written down there will be better understanding : what is this TF doing; when will that be done; how will this be produced; why is the TF doing it.

  • Eric: What does a TR contain? 

Decisions

  • Sample Decision Item

Action Items

Sample Action Item