Community Call #3 - ReCap & How To Ask Permission

[depatchedmode]

Notes archived here: https://github.com/ChainAgnostic/secure-design/blob/main/meetings.md
Working file here: https://hackmd.io/fATDo4lQTymza-XxPwxG7A?both

Summary: Had a great presentation from Sam Gbafa of Spruce about their ReCap extension to SIWE. Agost also summarized his set of concerns related to the How To Ask Permission article and the need to mitigate people's decision fatigue when encountering many AuthZ & AuthN prompts. We've resolved to prototype some ideal permission flow UX and see how it maps back current standards and capabilities.

Main themes were:

• importance contextual permissions
• challenges with revocation, and creating a permissions management view
• the educational responsibilities in achieving informed consent & making the impacts of selective disclosure clear
• tension between increasing friction to aid safety & security vs decreasing friction to support task completion

Action Items:

• Schedule next Community Call — avoid the monthly Cacao / AuthZ time slot: Community Call #4 - REQUEST FOR AGENDA #6
• Start Permissions Flow Prototyping discussion thread — Ideal Permissions UX #7