w3c-ccg/security-vocab

Missing documentation for security:contoller

bblfish opened this issue · 1 comments

There is no documentation for the "controller" property that is used in a very large number of examples in the security vocab. It is given a namespace in the v3 namespace json-ld giving it the URLhttps://w3id.org/security#controller.

My guess is that it relates key material to the agent that knows the private key of the published public key.

We have a use for this in Solid, and I have written up here how I propose we use it: JWK in Access Control. So I wanted to check here if the interpretation of the relation I was guessing at was correct, and of course it would help if that were specified in writing in the spec.

is security:controller the same as did:controller from the [did specification])(https://www.w3.org/TR/did-core/#dfn-did-controllers)? Is there an equivalent security:subject?

Mhh: I see that the did namespace document assigns "controller" to <https://w3id.org/security#controller> so they are the same. So the problem is that by following one's nose one does not end up at the did specification.