CASA CACAO/AuthZ WG - 28 Nov

[bumblefudge]

28 November

PRs to refine/move to close

Ongoing issues/topics

• ceramic's varsig library - EIP191, JWTs, and more sig types coming soon
  • JS-did repo branch (packaged soon, works as branch for the compilers from code)
  • implementer feedback for the spec:
    • spec is basically just examples -- needs to be prosily spec-ified
    • multicodecs wishlist -
      • EIP191 - personal_sign (EVM) (0xe191 for now)
      • EIP712 - structured data signing (EVM) (0xe712 for now)
      • JOSE (0x7053 for now) - give https://datatracker.ietf.org/doc/rfc7520/ as normref
        • alternate path if rodd, volker, or anyone else thinks it's a 2-entry scenario:
          • JWT
            • unprotected header and body both b64d JSON
          • JWS more generally (ideally consecutive)
            • header but body can be arbitrary octet bytes
            • sergey- also allows multisignature

Next Steps

• [ ] @chunningham will start the editorial process of making varsig spec more spectastical and tag juan to clean up after
• [ ] @bumblefudge will spearhead multicodec registrations (@expede any opinions?)
• [ ] @ukstv will finish breaking varsig out as a package from the js-did lib and ship it to the masses clamoring for freedom as an NPM library