Add text clarifying where group controllers might be listed.

[msporny]

This PR is an attempt to address issue #839 by adding text clarifying where group controllers might be listed.

---

Preview | Diff

[wip-abramson]

Reading over the section referenced in issue #839 - https://www.w3.org/TR/did-1.0/#group-control.

I think I would add another sentence:

Verification methods that require the combination of cryptographic operations from members of a group to produce a proof MAY be used to control the contents of a DID document, how this is realized is dependent on individual DID method specifications.

Just because a DID document expresses a verificationMethod, does not automatically mean that those who can create proofs associated with that verificationMethod have the ability to control the content of the DID document. Sometimes, even often, these are completely separated by the DID method.

[TallTed]

Maybe?
Verification methods that require a proof be produced by a combination of cryptographic operations performed by members of a group can be used to control the contents of a DID document; exactly how this is realized depends on individual DID method specifications.

[TallTed]

Suggested change

	privacy reasons.
	privacy reasons. Verification methods that require a proof be produced by a combination of cryptographic operations performed by members of a group can be used to control the contents of a DID document; exactly how this is realized depends on individual DID method specifications.

[w3cbot]

This was discussed during the #did meeting on 20 March 2025.

View the transcript

w3c/did#883

manu: merged Wip's changes. One last proposal on some language. Asks that we remove normative "may" word. We're requesting spec requirements but if "may" we won't enforce. Change "may" to "can" so it conveys the same thing without normative language which requires a test suite

wil: this requires a verification but it doesn't mean you can control the did doc with that verification method

<manu> +1 to what Will just said.

TallTed: has a modification which TallTed will make shortly

---

[peacekeeper]

I agree this is useful..

https://github.com/w3c-ccg/verifiable-conditions/ is an example where thresholds are expressed explicitly, and there are also other examples (such as KERI-based DID methods) where the the thresholds are expressed as part of the verification material.