{"action":"created","issue":{"url":"https://api.github.com/repos/w3c-ccg/ld-ocap/issues/6","repository_url":"https://api.github.com/repos/w3c-ccg/ld-ocap","labels_url":"https://api.github.com/repos/w3c-ccg/ld-ocap/issues/6/labels{/name}","comments_url":"https://api.github.com/repos/w3c-ccg/ld-ocap/issues/6/comments","events_url":"https://api.github.com/repos/w3c-ccg/ld-ocap/issues/6/events","html_url":"https://github.com/w3c-ccg/ld-ocap/issues/6","id":312600255,"number":6,"title":"Should ld-ocap be built on top of Verifiable Credentials?","user":{"login":"cwebber","id":55698,"avatar_url":"https://avatars2.githubusercontent.com/u/55698?v=4","gravatar_id":"","url":"https://api.github.com/users/cwebber","html_url":"https://github.com/cwebber","followers_url":"https://api.github.com/users/cwebber/followers","following_url":"https://api.github.com/users/cwebber/following{/other_user}","gists_url":"https://api.github.com/users/cwebber/gists{/gist_id}","starred_url":"https://api.github.com/users/cwebber/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cwebber/subscriptions","organizations_url":"https://api.github.com/users/cwebber/orgs","repos_url":"https://api.github.com/users/cwebber/repos","events_url":"https://api.github.com/users/cwebber/events{/privacy}","received_events_url":"https://api.github.com/users/cwebber/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":5,"created_at":"2018-04-09T16:30:46Z","updated_at":"2018-04-09T20:16:27Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"This has come up in #5 and in [this issue on the VC repo](https://github.com/w3c/vc-data-model/issues/72) but it really is its own discussion.\r\n\r\nFirst off, *can* ld-ocap be built on top of Verifiable Credentials?  [Probably](https://github.com/w3c/vc-data-model/issues/72#issuecomment-372749713), though it may be [awkward to do so](https://github.com/w3c/vc-data-model/issues/72#issuecomment-372794452) particularly because the concepts of attentuation and delegation are completely different within a capability context (they aren't advisory as to what should be done but are something that an algorithm does).  But we could probably shoehorn it in and indeed both have many of the same fields, so it may appear that they should.\r\n\r\nMy feeling at the moment though is that even though we could, we shouldn't, because this will result in developers having to implement two completely different behaviors depending on whether they are using a VC or an ld-ocap capability, and developers *probably won't* condition-switch correctly, and so they will do things wrong.  By this I mean that if you treat ld-ocap as an identity, it actually becomes an ACL, which we don't want.  A clearer explaination on why this is coming in the next post :)"},"comment":{"url":"https://api.github.com/repos/w3c-ccg/ld-ocap/issues/comments/379880141","html_url":"https://github.com/w3c-ccg/ld-ocap/issues/6#issuecomment-379880141","issue_url":"https://api.github.com/repos/w3c-ccg/ld-ocap/issues/6","id":379880141,"user":{"login":"cwebber","id":55698,"avatar_url":"https://avatars2.githubusercontent.com/u/55698?v=4","gravatar_id":"","url":"https://api.github.com/users/cwebber","html_url":"https://github.com/cwebber","followers_url":"https://api.github.com/users/cwebber/followers","following_url":"https://api.github.com/users/cwebber/following{/other_user}","gists_url":"https://api.github.com/users/cwebber/gists{/gist_id}","starred_url":"https://api.github.com/users/cwebber/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cwebber/subscriptions","organizations_url":"https://api.github.com/users/cwebber/orgs","repos_url":"https://api.github.com/users/cwebber/repos","events_url":"https://api.github.com/users/cwebber/events{/privacy}","received_events_url":"https://api.github.com/users/cwebber/received_events","type":"User","site_admin":false},"created_at":"2018-04-09T20:16:27Z","updated_at":"2018-04-09T20:16:27Z","author_association":"CONTRIBUTOR","body":"BTW, some of this is documented in the ld-ocap spec itself.  I'd encourage anyone considering commenting on this thread to read the following sections: [Linked Data Capabilities By Example](https://w3c-ccg.github.io/ld-ocap/#ocap-by-example), [Capabilities Are Safer](https://w3c-ccg.github.io/ld-ocap/#capabilities-are-safer), [Relationship to Verifiable Credentials](https://w3c-ccg.github.io/ld-ocap/#capabilities-are-safer), and [Handling Abuse](https://w3c-ccg.github.io/ld-ocap/#handling-abuse)."}}
{"actor":{"display_login":"cwebber"}}