[Openid-specs-ab] Spec Call Notes 22-Nov-21

[Mike Jones]

Spec Call Notes 22-Nov-21

John Bradley
Mike Jones
Tom Jones
Tony Nadalin
Kristina Yasuda
Edmund Jay

OpenID Connect Federation
              There was a discussion last week about entity statements
                           The call was recorded
              John said that there was discussion about whether to page large results
              Tom filed an issue on a possible Federation enhancement
                           #1358: Search Query
              There's an API to list members of a federation
                           It lists the entities - but does not return the entity's metadata
                           Mike said that the entities are authoritative for their metadata - not the federation operators
                           Tom reported that last week there was a discussion on whether permissions should be required to get the list
              John asked Tom to generate a use case

Publishing an updated SIOP V2 draft
              We merged PRs #63 and #64
                           Using OpenID Connect Federation entity statements
                           Enabling dynamic discovery
              PR #68 incorporates feedback received after the merges
                           We plan to publish a new stable draft after that is merged

OIDC4VP Issue Triaging
              Several issues were marked as pending close, following discussions with DIF
              There haven't been any new issues for it filed recently
              There have been some implementations
              PR #75 addresses four issues

OIDC4VP syntax for returning VPs
              Some implementations are using the vp_token syntax
              Kristina is going to ask the mailing list if there are also implementations using the claims syntax
              We would likely still keep the claim definition for use in JWTs and at the UserInfo Endpoint
              We touched on cases where multiple VPs are returned

Tom brought up mDL and Connect
              Kristina thought that should be its own discussion
              Mike said that we could dedicate a call to that topic

Ballpark Use Case
              Tom said that for the ballpark, you might need both proof of age and proof of vaccination
              John observed that those things might live in separate wallets
                           He said that we may have to tackle cross-wallet integration

Open Pull Requests
              https://bitbucket.org/openid/connect/pull-requests/
              PR #55: Point to RFC 7591 for Dynamic Client Registration metadata
                           DW updated - Mike to review
              PR #74: adds parameter for requesting credential type format - #1276
                           Kristina requested that Edmund wait on this one until she and Torsten propose some updates

Open Issues
              https://bitbucket.org/openid/connect/issues?status=new&status=open
              #1357: Metadata Discovery with encrypted private_key_jwt
                           Mike to add a comment about using a header parameter

Next Call
              SIOP Special call Thursday, November 25, 8am Pacific Time
                           The call is being held despite it being US Thanksgiving
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20211123/9d1b9313/attachment.html>