Add text clarifying offline usage of the ToIP stack

[andorsk]

One of the things that came up in the TATF meeting October 7, is that it would be good to clarify where documentation ( if it exists ) on the offline trust layer.

Will update this issue later with more details.

[andorsk]

Some comments from the meeting:

Mobile Drivers License - dealing with offline mode - how are they doing it

• they have to download the keys (periodically) to continue for the reader
• how to deal with not having access to a data registry
• has been done with PKD - has not yet been talked about.

[talltree]

I agree it is important for us to address the general category of offline use cases and to make some clear statements about how they can be addressed by the ToIP stack.

Proposed labels: priority-2 needs-PR

[jospencer-460]

We're talking about a Presentation Type of Offline. This doesn't mean that this needs to be reflected at the Use Case level.

[andorsk]

@jospencer-460 I seemed to have assigned you but I don't remember why "doh". My guess it was mentioned on the October 13 call. Could you confirm?

[jospencer-460]

I'm happy to be part of this discussion / decision. I commented on this issue and we were using my comment to register me into the process.

[allant0]

Suggest we consider identifying within the layers that already exist in the architecture which ones support online & offline activities. To me it seems strange that only one layer is focused on offline access. All parts of the system need to handle what happens when they go "offline". It could be as simple as "report error that this functionality is not possible while not connected to the internet" or it could be more "support X, Y, Z activities for the entity locally and mandate synchronization of the state of X, Y upon resumption of online access".

[andorsk]

Any thoughts about moving this into discussion for now, and where we can bring it back to issues once it's been scoped a little better?

I can say that this recently came up in a meeting I was in, specifically about offline trust. It would be great if one day there is some clear documentation on this.

[andorsk]

As far as suggestions here: @jospencer-460 I'd love to work with you on it as well. There's a few areas that specifically interest me:

1. Trust registries and how you build trust in an offline context.
2. Caching and Updating.
3. Some constraints, I would imagine with some overlap with a CRDT.