Time

Agenda Item

Lead

Notes

5 min

• Start recording

• Welcome & antitrust notice

• Introduction of new members

• Agenda review

Chairs

• Antitrust Policy Notice: Attendees are reminded to adhere to the meeting agenda and not participate in activities prohibited under antitrust and competition laws. Only members of ToIP who have signed the necessary agreements are permitted to participate in this activity beyond an observer role.

• New Members:

5 min

Review of previous action items

Chairs

15 mins

Implementation Session

Andor

DECISIONS:

• Deprecating v1

  • Subhasis: Deprecate. Put as V1

  • Darrell: Deprecate. Put as v1. 

  • DECISION: 

    • TRP V1 Will Be Deprecated

• TRQP is separated out from TRP and an entirely different spec. TRQP version will be set to v1. 
  
  

  • DECISION: 

    • Approved 

• TODO: Andor to propose a PR next week with those changes. 

10 mins

Implementation Session

Andor

DID vs. VID: https://github.com/trustoverip/tswg-trust-registry-protocol/pull/73

• Should we restrict API to DIDs?

• Darrell: 

  • X509 Side. Need to figure out how to bind it to the DID.

  • High Assurance DIDs

• Scott:

  • Technical: Better understanding of X509 is needed.

  • We need to come up with guidance with an ecosystem like CSP 

  • Verifiable Credentials and X509 Certs. 

  • We need to solve this problem. 

• Following:

  • Do this change to DID, and raise major issue: 

    • X509 DID World Needs to be a bridge

    • HAVID ← High assurance VID work

• Scott: 

  • https://www.rfc-editor.org/rfc/rfc5280#section-4.1.2.9

• Darrell:

  • x509 bridge may be required. 

• Scott:

  • Challenge: Meeting before what the charter is. 

  • Expectation: Incumbent of group to communicate the needs. 

• Darrell:

  • Someone needs to work on bridging pattern. 

• Scott: 

  • Analysis of all the fields in the TR that exist in the X509 field. 

  • X509 Trust Registries

  • IIW: that needs to be worked on. 

• TR: List of Authoritative Entities

Entity Endpoints

• Continue conversation from last week on /entity/{vid} endpoint and authorizations. 

Open

• Needs some documentation for implementors.

• Take a use case. Explain TRQP for example. 

ACTION ITEM: Add use case documentation and clear documentation. 

* https://www.ssl.com/article/browsers-and-certificate-validation/

Suggestion: Invite Implementors. Present use case. 

• This is how I would populate and use the protocol. 

10 mins

Special topic #3

5 mins

• Review decisions/action items

• Planning for next meeting 

Chairs