decentralized-identity / decentralized-identity/cawg-identity-assertion

Consider expansion beyond 'did:web'

Open
#194 3 comments 1 reaction 1 assignee Claimed by @scouten-adobe View on GitHub
Dominant language
JavaScript
Stars
11
Forks
14
PR merge metrics
No merged PRs in 30d

Description

- [x] I have read the [CLA Document](https://github.com/creator-assertions/identity-assertion/blob/main/contributor-license.md) and I hereby sign the CLA.

----------------------------------------

Currently, the v1.1 draft limits the allowed list of `issuer` DID methods of a claims aggregation to *only* `did:web`. Given the importance of the claims aggregator in establishing trust for identity assertions, this could result in a point of weakness for the entire trust model.

Last year, myself, Markus Sabadello (Danube Tech), Alen Horvat (EBSI) and Carsten Stoecker (Spherity), highlighted some of the potential issues arising with reliance on did:web in a blog called "[Moving Beyond the Limitations of did:web](https://cheqd.io/blog/moving-beyond-the-limitations-of-didweb/)". This blog highlights a series of issues that might arise from sole reliance on did:web, including issues with provenance and versioning; data integrity; privacy and tamper resistance.

There is currently [ongoing work at DIF to standarize a set of "DID Traits"](https://identity.foundation/did-traits/) that can be used to determine the most effective DID methods for specific purposes. Moreover, in the EU, the [CEN/CENELEC](https://www.cencenelec.eu/) is beginning to explore which DID methods are best placed to operate for within EU Digital Identity framework. Both of these initiaties should be followed closely to expand the CAWG's list of supported DID Methods.

At present I believe that:

- did:tdw
- did:cheqd
- did:ebsi (for adopters in the European market)

Would be strong additions to the list of supported DIDs, as they provide much stronger technical controls around DID Document versioning, provenance and tampering.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.