10 February 2025 (NA/EU)
Attendees
-
Andy Rosen, Sequence Key
-
Brian McInnis, Long Tailed Leopard
-
Christian Paquin, Microsoft
-
Claudiu Cismaru, Adobe
-
Clement Hecquet, Digimarc
-
David Bigsby, Government of British Columbia
-
Eric Scouten, Adobe
-
Gavin Peacock, Adobe
-
Hans Granqvist, Noosphere
-
Jeremy Uzan, Universal Music
-
Luke Nispel, OriginVault
-
Makki Elfatih, HKDolts
-
Nigel Earnshaw, BBC
-
Peleus Uhley, Adobe
-
Philippe Mougin, AFP
-
Philippe Rixhon, JPEG Trust
-
Richard W. Kroon, EIDR
-
Scott Perry, Digital Governance Institute
-
Will Kreth, HAND (Human & Digital) Identity
Meeting notes
Review previous action items
1'01": All action items from previous meetings resulted in PRs that have been merged.
Review PR #211: (Work in progress) Identity claims aggregation validation
1'21": Reviewed PR #211. This was a mostly-complete draft, submitted to the group for feedback on what has been written so far.
Action items:
-
8'41": ACTION: Revise PR to suggest that validator could pass supplementary error codes in addition to those described by CAWG spec. (For example, "problem details" as described in the W3C VC spec.)
-
13'39": ACTION: Revise PR to reduce the number of "validator must stop" conditions to the bare minimum. (Same for PR 210.)
-
22'18": ACTION: Revise PR to avoid repetition of the full set of rules for
verifiedIdentities
entries. -
34'14": ACTION (✅): Eric to call meeting with Scott and David regarding levels of assurance and validation lifetime. (Set for Thursday, 13 February.)
Review PR #210: Introduce new section, “C2PA Manifest validation prerequisites”
38'36": Reviewed PR #210. This PR calls out the C2PA Manifest validation as a prerequisite for identity assertion validation. Adds two new constraints:
-
The C2PA Manifest must now have been found to be valid. (The 1.0 CAWG spec only required well-formed.)
-
The identity assertion must have been found to match the hash reference in the claim data structure.
Action items:
-
48'59": ACTION: Revise PR to remove the "validator must stop" language if the manifest is not well-formed or if the assertion hash doesn’t match.
Review PR #207: Limit validity period for identity claims verifications
58'27": Reviewed PR #207. No new language as yet, but I’d like to explore the idea from a previous meeting of declaring the lifetime of identity claims verifications.