2025-46

[michielbdejong]

Peer Endorsements as credentials for Live Long Learners

life long learning
data you accumulate
devices you own
authorities you interact with
peers who recommend you
access to things

[michielbdejong]

Sending endorsement

packaged

To send a packaged endorsement, the sender needs to:

• point to a person
• point to some work (or create a description of it)
• state that this work was done by this user
• write some (positive) statement about it
• wrap these 4 things into one endorsement object
• sign it with their own keypair or publish on their own site
• send (a link to) it to the person

linked

To send a linked endorsement, the sender only identifies the work and not the person, so:

• write some (positive) statement that points to some work (just describing it is not an option here)
• sign it with own keypair or publish on their own site
• send (a link to) it to the person
• separately, the person claims to be the author of this work (how?)

There could be different ways to package, different ways to point, different ways to sign and different ways to send.

[michielbdejong]

The verifier needs to know:

• learner identity
• product
• endorser identity
• endorsement message

Furthermore,

• the signature needs to be valid (chain of trust?)
• they need to value the opinion of the endorser
  • they already know the endorser from elsewhere
  • there is a statement elsewhere that explains the endorser's role, e.g. teacher or employer of the learner

[michielbdejong]

Actors:

• learner
• endorser (peer/employer/teacher/...)
• verifier (employer/peer/...)
• OPTIONAL: authority (endorsing the endorser in relation to the learner)

Data:

• endorsement text
• portfolio item

Links:

• portfolio item <-> learner
• [portfolio item, endorsement text] <-> endorser
• endorser - authority, learner - authority, verifier - authority
• endorser - verifier (through signature or signature chain)

[michielbdejong]

The sending mechanism and data format are out of scope because they are expected to change several times over the course of the learner's life. But we do distinguish between physical devices such as wallets and virtual devices such as vaults.

[michielbdejong]

So differentiate between

• endorsers everyone should trust because of their role in relation to the learner + proof of that role
• endorsers the verifier trusts because they know them socially and have a means to check their signature

[michielbdejong]

This model is usable for peer endorsements as well as for teacher / institution endorsements

[michielbdejong]

I created some slides for Thursday: michielbdejong/presentations@4c4fdb5

Will now clean up the Let's Peppol proxy code so it will be easy to maintain for BARGE vzw and robust for the pen testing. This means removing the syncables because that's hard to understand and not yet battle-tested. Just a super simple express app with postgres.

[michielbdejong]

I started looking at e-invoice.be.
I can't validate/upload a UBL invoice yet, but the JSON one works.
It seems I should use the appropriate tenant API key.
They created a few but I don't know how to find out what their Peppol IDs are, so sending is rejected with Tenant is not allowed to make a document with the given tax id.

So I'll call their API, either to create new tenants, or to look up the details of the existing tenants.

[michielbdejong]

https://docs.e-invoice.be/admin-api