Agenda:

• SAID URN ABNF review by Jonathan Rayback

• DIF Recommended DID method process

• Dossier Implementation Guidelines review by Daniel Hardman

Attendees:

Notes

• DIF Recommended DID process

  • In full swing

  • did:webvh is in the formal review stage for a few more weeks, will be the first formally recognized DID method.

  • did:cheqd starts tomorrow

  • did:web+ starts next week

  • did:scid starts early october

• Kent said this seems silly, but probably has value

• Originally there were a bunch of blockchain did methods

  • W3C Community Decided early on to allow for market experimentation.

    • That didn’t happen, the market did not decide and instead we got proliferation 200+ DID methods

  • DIF is saying, this was a bad idea, we need to have some process that says which DID methods have a reasonable level of security.

  • The attempt is to winnow down the number of blessed DID methods to give people some guidance on what to pick.

• DIF is not a standards body, it is a standards incubation body. Good place to put something before submitting things to a standards body.

• In DIF we drafted the charter for the W3C draft charter to solve the problem of “which did methods to pick”

  • Three types of DID methods:

    • Web based, ephemeral, and fully decentralized methods

    • There will be a web, ephemeral, and fully decentralized standard

  • did:webvh, did:webs, did:web+ are the web methods

    • Right now did:webvh ticks all the boxes.

Henk:

• Does did:webvf tick the boxes on all the security requirements?

  • The DIF process does not make any assumptions about quality.

Jonathan:

• This is to provide a short list of DID methods to evaluate.

• We just need to finish paperwork and make it pass the tests.

Sam:

• Once we have a fully compliant W3C did method the next question someone might ask is, “what about security?” W3C isn’t in a position to have an opinion about that yet independent security audits are. Cardano made an independent security audit on KERI and is in the process of being published. healthKERI did an audit as well, though this is also unpublished.

• At some point there will be a security comparison between did:webvh and did:webs.

Jonathan:

• Eventually the DIF will mention the security analysis between “blessed” DID methods.

Action Items:

• Kent to get on Jonathan’s schedule and get the did:webs submission to DIF figured out.

• Look at migrating to Spec-Up T

Next Meeting Date:

Oct 21