Code Monkey home page Code Monkey logo

Comments (4)

AlbertoElias avatar AlbertoElias commented on June 29, 2024 1

I have to admit I hadn't thought about the points you raised Joe, and I definitely agree with them. That said, I think we should conform to what the DID spec says, and if this term isn't appropriate, we should discuss it there

from rwot6-santabarbara.

peacekeeper avatar peacekeeper commented on June 29, 2024

Thanks Joe for this feedback! I agree with you on both points..

  1. I agree there are cases where owner != control. Theft is one example; guardianship is another example. Remember that in earlier versions of the DID specs, we actually had the fields "owner" and "control" in the DID document.
  2. And yes of course SSI doesn't mean that you control all the claims that someone makes about you / your identifier. I've also been in discussions where people didn't realize this at first, and they thought SSI means that you can change attributes of your driver's license. @ChristopherA 's famous "Path to SSI" blog post actually explains this well (2nd principle). We just have to make sure we keep explaining it.

There are however also reasons why I think the term "identity owner" (for now) is not so bad:

  1. I always found "identity owner" is a nice counterpart to the traditional industry term "identity provider". I like to say in SSI we don't have "identity providers", we only have "identity owners". That's why in the DID Auth diagrams, there are only 2 parties, whereas e.g. in a typical OIDC diagram you have 3 parties. Even though "control" may be more precise, I still think "own" comes pretty close and makes a clear point how DID Auth is different from non-SSI authentication. "Own" may suggest magic fairy dust, but I feel there's equal risk that "control" is politically not strong enough. Facebook also lets you "control" your authentication process.
  2. The term "identity owner" is currently used in the DID spec itself. If we want to discuss / change it, I think we should first do it there.

Maybe we could keep the term for now, but add a section somewhere in the DID Auth paper with a quick discussion on it?

from rwot6-santabarbara.

peacekeeper avatar peacekeeper commented on June 29, 2024

Proposing to add the following section to the paper: #98

from rwot6-santabarbara.

peacekeeper avatar peacekeeper commented on June 29, 2024

Fixed by #98

from rwot6-santabarbara.

Related Issues (8)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.