Merge pull request #535 from TelegramSam/email_access_gov_fwk

Email Access Governance Framework

concepts/0535-email-access-governance-framework/README.md

@@ -0,0 +1,90 @@
+# 0535: Email Access Governance Framework
+- Authors: [Sam Curren]([email protected])
+- Status: [PROPOSED](/README.md#proposed)
+- Since: 2020-09-16
+- Status Note: Proposed, but in need of specifics to put into action.
+- Start Date: 2020-07-14
+- Tags: feature, protocol
+
+## Summary
+
+
+> Note: This RFC was created in advance of the [Credential Trust Establishment](https://identity.foundation/credential-trust-establishment/) spec work at the DIF. The concepts are good, but the governance mechanism should be updated to use this newer spec before action is taken.
+
+This Governance Framework is community managed.
+
+When making connections from one person to another over DIDComm, it is useful to be able to gain proof of something to verify that the connection is with the right person and has not been subject to a MITM attack. We expect this Governance Framework to be one of many used for the purpose of helping to verify identity attributes in the creation of trusted channels.
+
+This is an early attempt at the creation and use of of a practical governance framework. As Governance Framework technology improves, we expect this particular framework to be replaced.
+
+## Purpose
+
+To facilitate the verification of email access between two parties over DIDComm and related technologies.
+
+## Details
+
+### Goal Codes
+
+This Governance framework satisfies the following goal code(s):
+
+`aries.receive.verifiable.identifier`
+
+### Protocols
+
+`https://didcomm.org/present-proof/2.0/`
+
+### Roles
+
+**issuer**: Responsible for issuing credentials according to the requirements of this governance framework.
+
+### Schemas
+
+_TODO: schemas listed here_
+
+### Issuers
+
+BCGov (DID?)
+
+### Issue Requirements
+
+Issuers must validate email ownership by sending an email to the email address in question. The email MUST contain a link for the user to click, or a code to be entered in a verification step. After verifying that the clicked link or entered code matches, the credential may be issued.
+
+Issued credentials should indicate an expiration date no longer than 6 months from the date of verification.
+
+### Revocation
+
+This framework does not currently use revocation, relying upon the expiration date to prevent widespread issues.
+
+### Allowable Verification Purposes
+
+Email addresses revealed in this manner may be used for the following purposes:
+
+- Displaying to recipient.
+- Checking against address book.
+
+Use outside these purposes, including the following examples, violates the allowed uses as specified by this governance framework.
+
+- Sending email to the address without explicit additional approval of the user.
+- Sharing email address with any other party.
+
+### Machine Readable Document
+
+Located [here](data.json).
+
+## Notes
+
+- The machine readable document is as simple as possible by design. As related technology improves, the document will be updated to reflect these changes.
+- Code for the indy email verification service: https://github.com/bcgov/indy-email-verification that could be used as a basis for an issuer.
+
+## Unresolved questions
+
+- Which networks?
+- Need Schemas and Issuers
+## Uses
+
+The following libraries or applications use this Governance Framework.
+
+Name / Link | Implementation Notes
+--- | ---
+ | 
+

concepts/0535-email-access-governance-framework/data.json

@@ -0,0 +1,12 @@
+{
+    "@context": ["https://github.com/hyperledger/aries-rfcs/blob/master/0430-machine-readable-governance-frameworks/context.jsonld"],
+    "name": "Email Access"
+    "version": "0.1",
+    "description": "Proof of email access, useful for proving a common identifier and/or validating an email address without performing a live loop-back test."
+    "last_updated": "2020-09-16",
+    "docs_uri": "http://github.com/hyperledger/aries-rfcs/blob/master/",
+    "data_uri": "<uri to machine readable portion of this example>",
+    "schemas": ["schemaidhere"],
+    "roles": ["issuer"], 
+    "rules": [ {"when": {"id": "did:example:abc123"}, "thus": "issuer"} ]
+}