{"id":2525,"date":"2024-04-28T20:23:35","date_gmt":"2024-04-29T03:23:35","guid":{"rendered":"https:\/\/self-issued.info\/?p=2525"},"modified":"2024-04-28T20:23:35","modified_gmt":"2024-04-29T03:23:35","slug":"securing-verifiable-credentials-using-jose-and-cose-is-now-a-w3c-candidate-recommendation","status":"publish","type":"post","link":"https:\/\/self-issued.info\/?p=2525","title":{"rendered":"Securing Verifiable Credentials using JOSE and COSE is now a W3C Candidate Recommendation"},"content":{"rendered":"<p><span class=\"plain\"><a href=\"http:\/\/www.w3.org\/\"><img decoding=\"async\" align=\"right\" src=\"http:\/\/self-issued.info\/images\/w3c_home.png\" alt=\"W3C logo\" \/><\/a><\/span>The Securing Verifiable Credentials using JOSE and COSE specification (a.k.a. VC-JOSE-COSE) has reached W3C Candidate Recommendation status. The <a href=\"https:\/\/www.w3.org\/2021\/Process-20211102\/#transition-cr\">Candidate Recommendation milestone<\/a> is described in the W3C Process document.  Please review the <a href=\"https:\/\/www.w3.org\/TR\/2024\/CRD-vc-jose-cose-20240425\/\">Candidate Recommendation of VC-JOSE-COSE<\/a>.  Thanks especially to <a href=\"https:\/\/twitter.com\/decentralgabe\">Gabe Cohen<\/a>, <a href=\"https:\/\/twitter.com\/OR13b\">Orie Steele<\/a>, and <a href=\"https:\/\/twitter.com\/brent_zundel\">Brent Zundel<\/a> for doing the hard work of getting us to this point!<\/p>\n<p>Since <a href=\"https:\/\/self-issued.info\/?p=2328\">I last wrote about this work<\/a>, the <a href=\"https:\/\/www.w3.org\/TR\/2024\/CRD-vc-data-model-2.0-20240416\/\">W3C Verifiable Credentials Data Model<\/a> (VCDM), which is also at Candidate Recommendation stage, has been narrowed to only use JSON-LD to represent credentials.  VC-JOSE-COSE secures VCDM payloads with JOSE, SD-JWT, or COSE signatures.  While I&#8217;m admittedly not a fan of JSON-LD, to the extent that Verifiable Credentials using the VCDM are in use, I&#8217;m committed to finishing a solid VC-JOSE-COSE specification so there is a simple, secure, standards-based way to sign these credentials.<\/p>\n<p>Of course, there are lots of Verifiable Credential formats to choose from, and more on the way.  Choices already existing include ISO <a href=\"https:\/\/www.iso.org\/standard\/69084.html\">mDoc<\/a>, IETF <a href=\"https:\/\/www.ietf.org\/archive\/id\/draft-ietf-oauth-selective-disclosure-jwt-08.html\">SD-JWT<\/a>, IETF <a href=\"https:\/\/www.ietf.org\/archive\/id\/draft-ietf-jose-json-web-proof-03.html\">JSON Web Proof (JWP)<\/a>, and W3C <a href=\"https:\/\/www.w3.org\/TR\/2024\/CRD-vc-data-model-2.0-20240416\/\">VCDM<\/a>.  The IETF is also planning to create a CBOR-based selective disclosure representation in the newly formed <a href=\"https:\/\/datatracker.ietf.org\/group\/spice\/about\/\">SPICE working group<\/a>.  It will be interesting to see how these all shake out in the marketplace!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Securing Verifiable Credentials using JOSE and COSE specification (a.k.a. VC-JOSE-COSE) has reached W3C Candidate Recommendation status. The Candidate Recommendation milestone is described in the W3C Process document. Please review the Candidate Recommendation of VC-JOSE-COSE. Thanks especially to Gabe Cohen, Orie Steele, and Brent Zundel for doing the hard work of getting us to this [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[29,8,28,27,25,33],"tags":[],"class_list":["post-2525","post","type-post","status-publish","format-standard","hentry","category-cbor","category-claims","category-cryptography","category-json","category-specifications","category-w3c"],"_links":{"self":[{"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/posts\/2525","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/self-issued.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2525"}],"version-history":[{"count":2,"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/posts\/2525\/revisions"}],"predecessor-version":[{"id":2527,"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/posts\/2525\/revisions\/2527"}],"wp:attachment":[{"href":"https:\/\/self-issued.info\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2525"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/self-issued.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2525"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/self-issued.info\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2525"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}