Comments (15)
I don't think we can deal with this in 1.0 -- we should close it or mark it as future work if that's a thing we're doing.
from vc-data-model.
We need to talk to Web App Sec about how we can sandbox third party Web Components that are used to display Verifiable Claims ... so we can prevent them from using the network (and potentially other things).
from vc-data-model.
Rendering a claim would involve additional items in the dm i think, to mark natural language (and there are security implications, making sure the text alternative is a correct translation).
from vc-data-model.
Potentially related:
https://w3c.github.io/webcomponents/spec/custom/
https://github.com/WICG/webpackage
from vc-data-model.
Other security issues include showing displays to users that do not accurately represent the verifiable credential.
from vc-data-model.
cc: @stonematt, @ottonomy, @kimdhamilton
from vc-data-model.
This issue seems like it's at risk for not being included in 1.0. Someone needs to propose some spec text or an example where we specify a display template / package.
If we don't have something by CR, we'll have to close this issue.
from vc-data-model.
+1 for closing this issue.
from vc-data-model.
We discussed this on the call and decided to defer this to V2. It's just a placeholder for that
from vc-data-model.
The issue was discussed in a meeting on 2021-08-11
- no resolutions were taken
View the transcript
4.3. Add display hints to data model, for example: information to use a Web Component (issue vc-data-model#42)
See github issue #42.
Wayne Chang: dlongley can you talk about this one
Dave Longley: we've already said this may be part of V2
Wayne Chang: we can move that to V2
Wayne Chang: #57
Wayne Chang: add roles to data model for next draft sounds V2
Kyle Den Hartog: +1
Manu Sporny: we've tried really hard to keep the language constrained, we don't want to open that up again. I think we should close.
David Chadwick: close it
Wayne Chang: I'm fine with closing, any objections?
from vc-data-model.
There is a proposal for rendering VCs here: https://github.com/WebOfTrustInfo/rwot11-the-hague/blob/master/advance-readings/rendering-verifiable-credentials.md
from vc-data-model.
Also a wallet rendering proposal here: https://github.com/decentralized-identity/wallet-rendering
from vc-data-model.
The issue was discussed in a meeting on 2022-08-10
- no resolutions were taken
View the transcript
4.5. Define v2 context (issue vc-data-model#42)
See github issue vc-data-model#42.
Kristina Yasuda: Looks like there is agreement to close this issue. Dave, any context?.
Dave Longley: We decided to defer this to 2.0, and I believe we should do this work. We should add name, description, etc. to the data model. There are further things about rendering hints, etc..
โฆ I think there was agreement this would be addressed in v2.
Kevin Dean: +1.
Phil Archer: I think it's relevant too. In GS1 issued VCs we want to include some human-readable information.
โฆ I worry about internationalization and accessibility. This should be considered.
Brent Zundel: there is also this: https://github.com/decentralized-identity/wallet-rendering.
Kristina Yasuda: Will keep the issue open.
from vc-data-model.
Progress was made at RWoT. Progress snapshot available here: https://github.com/WebOfTrustInfo/rwot11-the-hague/blob/master/draft-documents/rendering-vcs-snapshot-9-27-22.md
from vc-data-model.
closing as a duplicate of #928
from vc-data-model.
Related Issues (20)
- Unnecessary direction attribute? HOT 12
- EnvelopedVerifiablePresentation missing in data model HOT 5
- first example contains an http url identifying a credential HOT 5
- Remove at risk issue markers for property extension points. HOT 1
- What does the hash values in ยงB.2 mean? HOT 4
- Proposal: remove ambiguity and asymmetry as it relates to subject identifiers HOT 7
- Do we need sha3-512 in the vocabulary tables? HOT 6
- Should we use `Ed25519Signature2020` in the Examples? HOT 4
- Unmatched HTML Tag HOT 3
- Revisit Verifiable Credential media types HOT 19
- consider merging 3.4 and 5.1 as both sections are about the credential lifecycle. HOT 1
- Add issuee definition HOT 17
- Truth (or falsity) is not part of VCDM ecosystem HOT 4
- `credential repository` vs `repository`, and definitions in _1.2 Ecosystem Overview_ vs _2. Terminology_ HOT 4
- Consider explicitly allowing/recommending language maps for use in internationalisation. HOT 3
- Example of Use of renderMethod HOT 2
- Suggest to make explicit reference to the JADES standard HOT 3
- EnvelopedVerifiablePresentation missing in https://www.w3.org/ns/credentials/v2 HOT 3
- VC-JWT examples are out-of-date HOT 1
- Inconsistency between spec and schema HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. ๐๐๐
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google โค๏ธ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from vc-data-model.