Truth (or falsity) is not part of VCDM ecosystem

[TallTed]

Originally posted by @TallTed in #1469 (comment)

vc-data-model/index.html

Lines 3030 to 3032 in 1ab385f

	The [=holder=] and [=verifier=] trust the [=issuer=] to issue
	true (that is, not false) [=credentials=] about the [=subject=], and to
	revoke them quickly when appropriate.

Truth (or falsity) is not part of our remit. It is entirely possible that a holder and/or verifier might trust that everything issued by a given issuer is false. All that a verifier can trust is that the issuer made the claims contained in a properly secured verifiable credential.

[msporny]

Yes, I see your point. Want to raise a PR to address this, or I can? If you want to, can you re-assign yourself to address the issue?

[iherman]

The issue was discussed in a meeting on 2024-04-10

• no resolutions were taken

View the transcript

2.3. Truth (or falsity) is not part of VCDM ecosystem (issue vc-data-model#1472)

See github issue vc-data-model#1472.

Brent Zundel: Ted, it's your issue, do you want to walk us through.

Ted Thibodeau Jr.: possibly just deleting that paragraph.
… the problem with "trust" at all is, it's outside the bounds of what we can really do.
… we're cryptographically assuring that contents are the statements of the issuer, that's it.
… there's nothing about the truth of them, or anything else.
… just "this issuer said these things at this time".

Ivan Herman: +1 to TallTed.

Ted Thibodeau Jr.: so talking about truth in the context of revocation doesn't make sense.

Dave Longley: +1 to TallTed.

Manu Sporny: +1 to that, Ted.

Dave Longley: +1 to just remove the paragraph.

Manu Sporny: I think we do have, in some other part of the spec, exactly what you said.

Dmitri Zagidulin: +1 to remove paragraph.

Manu Sporny: I think it is generally presumed that you're going to listen to the issuer, but of course there are cases where you might not trust em.
… or just a subset of what they're saying. I reacted strongly to "lets just delete it", but now that I'm reading it, if we have that language elsewhere,.
… do you want to take this issue?

Ted Thibodeau Jr.: yeah, I'll take it,.

Joe Andrieu: this is a really good catch, Ted. I agree we don't have to depend on the trust. might be useful to say something about trusting that the issuer is using the mechanism correctly.

Brent Zundel: sounds like we have a path forward, look forward to the PR.

[TallTed]

PR #1474 has been created to fix this.

[msporny]

PR #1474 has been merged, closing.