<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">SIOP Special Topic Call Notes 14-Apr-22<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Mike Jones<o:p></o:p></p>
<p class="MsoNormal">Kristina Yasuda<o:p></o:p></p>
<p class="MsoNormal">Brian Campbell<o:p></o:p></p>
<p class="MsoNormal">Charlie Fontana<o:p></o:p></p>
<p class="MsoNormal">Petteri Stenius<o:p></o:p></p>
<p class="MsoNormal">Torsten Lodderstedt<o:p></o:p></p>
<p class="MsoNormal">Kenichi Nakamura<o:p></o:p></p>
<p class="MsoNormal">Ben (bengo)<o:p></o:p></p>
<p class="MsoNormal">David Schmudde<o:p></o:p></p>
<p class="MsoNormal">Joseph Heenan<o:p></o:p></p>
<p class="MsoNormal">Juan Caballero<o:p></o:p></p>
<p class="MsoNormal">George Fletcher<o:p></o:p></p>
<p class="MsoNormal">Petteri Stenius<o:p></o:p></p>
<p class="MsoNormal">Jo Vercammen<o:p></o:p></p>
<p class="MsoNormal">David Waite<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">SIOP Whitepaper<o:p></o:p></p>
<p class="MsoNormal"> A draft is available<o:p></o:p></p>
<p class="MsoNormal"> <a href="https://docs.google.com/document/d/1H556GIM_xD1yKl7rw1seq4bu83movFCkU8fQ7T8b1dI/edit">
https://docs.google.com/document/d/1H556GIM_xD1yKl7rw1seq4bu83movFCkU8fQ7T8b1dI/edit</a><o:p></o:p></p>
<p class="MsoNormal"> The plan is to publish it on openid.net<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">SIOP Call Schedule<o:p></o:p></p>
<p class="MsoNormal"> Kristina asked whether to move the SIOP Special Topic call to always be at 8am Pacific Time<o:p></o:p></p>
<p class="MsoNormal"> This would make the call time consistent week-to-week<o:p></o:p></p>
<p class="MsoNormal"> People were supportive of the change<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Rebooting the Web of Trust (RWoT)<o:p></o:p></p>
<p class="MsoNormal"> <a href="https://www.weboftrust.info/next-event-page.html">
https://www.weboftrust.info/next-event-page.html</a><o:p></o:p></p>
<p class="MsoNormal"> Scheduled for September 26-30, 2022 in The Hague, Netherlands<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Open Pull Requests<o:p></o:p></p>
<p class="MsoNormal"> <a href="https://bitbucket.org/openid/connect/pull-requests/">
https://bitbucket.org/openid/connect/pull-requests/</a><o:p></o:p></p>
<p class="MsoNormal"> PR #149: Credential Issuance based on OAuth<o:p></o:p></p>
<p class="MsoNormal"> No longer uses "openid" scope<o:p></o:p></p>
<p class="MsoNormal"> It uses an "openid_credential" scope instead<o:p></o:p></p>
<p class="MsoNormal"> George asked about other OpenID parameters that are used<o:p></o:p></p>
<p class="MsoNormal"> Torsten said that login_hint is used, but that it could be removed<o:p></o:p></p>
<p class="MsoNormal"> RFC 7523 defines private_key_jwt usage, for instance<o:p></o:p></p>
<p class="MsoNormal"> This replaces the OpenID issuance flow with an OAuth-based one<o:p></o:p></p>
<p class="MsoNormal"> Kristina said that an OpenID issuance flow could be layered on this<o:p></o:p></p>
<p class="MsoNormal"> Torsten said that this uses RAR<o:p></o:p></p>
<p class="MsoNormal"> Kristina asked if people wanted a week to review the PR<o:p></o:p></p>
<p class="MsoNormal"> People said yes<o:p></o:p></p>
<p class="MsoNormal"> We discussed the branding of the spec<o:p></o:p></p>
<p class="MsoNormal"> It's no longer OpenID Connect<o:p></o:p></p>
<p class="MsoNormal"> But it is about identity<o:p></o:p></p>
<p class="MsoNormal"> OpenID for Credential Issuance is a possible brand<o:p></o:p></p>
<p class="MsoNormal"> Kristina said that we want to merge this before IIW, ideally<o:p></o:p></p>
<p class="MsoNormal"> PR #156: [OIDC4VP] and an example of presenting ISO/IEC 18013-5:2021 mDL<o:p></o:p></p>
<p class="MsoNormal"> Kristina asked Kenichi to review<o:p></o:p></p>
<p class="MsoNormal"> Kristina reviewed the PE syntax with others<o:p></o:p></p>
<p class="MsoNormal"> We also want to merge this one before IIW<o:p></o:p></p>
<p class="MsoNormal"> PR #152: OP Identification/Attestation<o:p></o:p></p>
<p class="MsoNormal"> This is about providing the verifier information about the wallet<o:p></o:p></p>
<p class="MsoNormal"> It defines an OP Attestation JWT<o:p></o:p></p>
<p class="MsoNormal"> It has an OP identifier as the "iss" claim<o:p></o:p></p>
<p class="MsoNormal"> George asked whether wallets are doing Dynamic Client Registration<o:p></o:p></p>
<p class="MsoNormal"> George asked whether this is all self-asserted information<o:p></o:p></p>
<p class="MsoNormal"> Torsten said that it is bound to the ID Token<o:p></o:p></p>
<p class="MsoNormal"> Torsten asked people to think about whether this should always be added<o:p></o:p></p>
<p class="MsoNormal"> George asked about whether we should also have an application attestation<o:p></o:p></p>
<p class="MsoNormal"> Kristina discussed the secure area used for the signatures on the application<o:p></o:p></p>
<p class="MsoNormal"> Torsten said that this sounds like key attestation to him, which is something different<o:p></o:p></p>
<p class="MsoNormal"> George asserted that most users will want multi-device wallets<o:p></o:p></p>
<p class="MsoNormal"> George said that the wallet may want more information about the application talking to it<o:p></o:p></p>
<p class="MsoNormal"> Kristina asked George to add his thoughts as issue comments<o:p></o:p></p>
<p class="MsoNormal"> PR #147: SIOP v2 Code Flow<o:p></o:p></p>
<p class="MsoNormal"> Kristina said that we want to merge this before IIW<o:p></o:p></p>
<p class="MsoNormal"> Torsten added functionality since last week<o:p></o:p></p>
<p class="MsoNormal"> Mike will review<o:p></o:p></p>
<p class="MsoNormal"> PR #148: SIOP support metadata & Request SIOP<o:p></o:p></p>
<p class="MsoNormal"> This was also updated based on feedback from last week's call<o:p></o:p></p>
<p class="MsoNormal"> Kristina said that we also want to merge this before IIW<o:p></o:p></p>
<p class="MsoNormal"> George reviewed and approved<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Open Issues<o:p></o:p></p>
<p class="MsoNormal"> <a href="https://bitbucket.org/openid/connect/issues?status=new&status=open">
https://bitbucket.org/openid/connect/issues?status=new&status=open</a><o:p></o:p></p>
<p class="MsoNormal"> #1470: SIOP response with vp_token only?<o:p></o:p></p>
<p class="MsoNormal"> We will have a session on this at IIW<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Next Call<o:p></o:p></p>
<p class="MsoNormal"> The next Connect call will be on Monday, April 18, 2022 at 4pm Pacific Time<o:p></o:p></p>
</div>
</body>
</html>