DID / DPKI integration about biscuit

[tarcieri]

One of the interesting things to keep in mind about Biscuits (and Macaroons, and SPKI/SDSI) is they can lean on their built-in support for delegation to express various PKI patterns.

Especially with support for third party blocks/caveats (#103) this can solve problems analogous to certificate authorities and certificate chains.

(In fact it can go far beyond that... you can express SAML/OIDC-like relationships but maintaining cryptographic bindings across principals, which effectively eliminates audience confusion attacks via cryptography)

As such, Biscuits don't really gain much from integrations with other PKI systems, especially because the integration patterns are subtly different (more like OCap patterns)

[Geal]

DIDs and VCs are not in the roadmap right now, although we've been looking at them, and generally we're interested in how Biscuit can integrate with other systems. And as @tarcieri said, with the third party blocks feature coming up, there will be a lot of cool patterns to explore

[BastienVigneron]

Thank you Tony and Geoffroy.
I have to investigate on third party blocks but I'm not sure its allow easily to integrate with DID.

I guess what we need is only the DID of the user (controller in DID world) and the DID of the Biscuit emitter, and of course appropriate signatures of both.

For information I'm trying to evaluate the relevance of the integration of Biscuit in this context.