<div dir="auto">We chose the term"mobile credential" in PEMC fwiw<br><br><div data-smartmail="gmail_signature">thx ..Tom (mobile)</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Apr 18, 2022, 9:07 AM David Chadwick via Openid-specs-ab <<a href="mailto:openid-specs-ab@lists.openid.net">openid-specs-ab@lists.openid.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
<p><br>
</p>
<div>On 14/04/2022 23:18, Kristina Yasuda
via Openid-specs-ab wrote:<br>
</div>
<blockquote type="cite">
<div>
<p class="MsoNormal">Thanks for the notes, Mike!<u></u><u></u></p>
<p class="MsoNormal">Following up with one question and two asks
on whitepaper, PRs, and the next Atlantic Connect call.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Regarding the Whitepaper. We would like to
get <b>WG’s input regarding the naming (branding) of the work</b>.
<u></u><u></u></p>
<p class="MsoNormal">We are making a change to base Credential
Issuance specification on Oauth2.0 rather than OpenID Connect
(PR #149). However, because the issuance is about identity
assertions, we discussed that we want to keep using OpenID
(note: no Connect after OpenID).<u></u><u></u></p>
<p class="MsoNormal">What would people think <b>of “OpenID for
Decentralized Identity (OpenID4DI)”</b> naming for the
specification family of SIOPv2, OIDC4VP and OpenID4CI (OpenID
for Credential Issuance)?
</p>
</div>
</blockquote>
<p>Whilst it is true that the specs cater for DIDs, they also cater
for VCs and mDLs, but none of these technologies are mandatory to
implement. Therefore using the term DI in the title is misleading.
Rather we need a generic term that implies all 3 of these
technologies may be including without naming or mandating any of
them. Suggestions are self-sovereign identity SSI (OID4SSI) or
User Control (OID4UC) or SIOP (OID4SIOPv2) or ...<add your
suggestion here> <br>
</p>
<p>Kind regards</p>
<p>David</p>
<p><br>
</p>
<blockquote type="cite">
<div>
<p class="MsoNormal"><u></u><u></u></p>
<p class="MsoNormal">Since people are so used to calling our
work “SIOP”, maybe a better idea is to
<b>call the entire body of work “SIOPv2”</b> as an
alternative….<u></u><u></u></p>
<p class="MsoNormal">And again, huge thank you to Jo, David C.,
Torsten and Kenichi for being the lead editors and actively
contributing to the whitepaper!<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">On behalf of the editors of SIOPv2,
OIDC4VP, OpenID4CI specs, I also wanted to highlight that we
are trying to make as much progress as possible before IIW,
OSW and EIC.
<u></u><u></u></p>
<p class="MsoNormal"><b>Please, please review the PRs and
related issues and explicitly note if you approve, have no
objections, or want to request changes</b> – you can use
whatever is convenient to you – make a comment, clicking an
Approve/Request Changes button, or directly tell the feedback
to the editors.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I would also like to ask if we can <b>spend
at least half of the next week’s Atlantic Connect WG call
(the one before the SIOP call) on OpenID4DI related issues</b>,
since I think we need more time than a SIOP call to cover all
the important ones prior to IIW.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Thank you very much!<u></u><u></u></p>
<p class="MsoNormal">Kristina<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Openid-specs-ab
<a href="mailto:openid-specs-ab-bounces@lists.openid.net" target="_blank" rel="noreferrer"><openid-specs-ab-bounces@lists.openid.net></a>
<b>On Behalf Of </b>Mike Jones via Openid-specs-ab<br>
<b>Sent:</b> Thursday, April 14, 2022 2:40 PM<br>
<b>To:</b> <a href="mailto:openid-specs-ab@lists.openid.net" target="_blank" rel="noreferrer">openid-specs-ab@lists.openid.net</a><br>
<b>Cc:</b> Mike Jones <a href="mailto:Michael.Jones@microsoft.com" target="_blank" rel="noreferrer"><Michael.Jones@microsoft.com></a><br>
<b>Subject:</b> [Openid-specs-ab] SIOP Special Topic Call
Notes 14-Apr-22<u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">SIOP Special Topic Call Notes 14-Apr-22<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Mike Jones<u></u><u></u></p>
<p class="MsoNormal">Kristina Yasuda<u></u><u></u></p>
<p class="MsoNormal">Brian Campbell<u></u><u></u></p>
<p class="MsoNormal">Charlie Fontana<u></u><u></u></p>
<p class="MsoNormal">Petteri Stenius<u></u><u></u></p>
<p class="MsoNormal">Torsten Lodderstedt<u></u><u></u></p>
<p class="MsoNormal">Kenichi Nakamura<u></u><u></u></p>
<p class="MsoNormal">Ben (bengo)<u></u><u></u></p>
<p class="MsoNormal">David Schmudde<u></u><u></u></p>
<p class="MsoNormal">Joseph Heenan<u></u><u></u></p>
<p class="MsoNormal">Juan Caballero<u></u><u></u></p>
<p class="MsoNormal">George Fletcher<u></u><u></u></p>
<p class="MsoNormal">Petteri Stenius<u></u><u></u></p>
<p class="MsoNormal">Jo Vercammen<u></u><u></u></p>
<p class="MsoNormal">David Waite<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">SIOP Whitepaper<u></u><u></u></p>
<p class="MsoNormal"> A draft is available<u></u><u></u></p>
<p class="MsoNormal"> <a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1H556GIM_xD1yKl7rw1seq4bu83movFCkU8fQ7T8b1dI%2Fedit&data=05%7C01%7CKristina.Yasuda%40microsoft.com%7Cb603a5a31fc34e19e98108da1e5f4db1%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637855693434810420%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=ZvTYuufYE%2FMjzIeLujvPj6USvdiazssi984unP6YF4o%3D&reserved=0" target="_blank" rel="noreferrer">
https://docs.google.com/document/d/1H556GIM_xD1yKl7rw1seq4bu83movFCkU8fQ7T8b1dI/edit</a><u></u><u></u></p>
<p class="MsoNormal"> The plan is to publish it on
<a href="http://openid.net" target="_blank" rel="noreferrer">openid.net</a><u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">SIOP Call Schedule<u></u><u></u></p>
<p class="MsoNormal"> Kristina asked whether to
move the SIOP Special Topic call to always be at 8am Pacific
Time<u></u><u></u></p>
<p class="MsoNormal"> This would make
the call time consistent week-to-week<u></u><u></u></p>
<p class="MsoNormal"> People were
supportive of the change<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Rebooting the Web of Trust (RWoT)<u></u><u></u></p>
<p class="MsoNormal"> <a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.weboftrust.info%2Fnext-event-page.html&data=05%7C01%7CKristina.Yasuda%40microsoft.com%7Cb603a5a31fc34e19e98108da1e5f4db1%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637855693434810420%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=ZiI%2BWYjrkKplZVtoKhFJQEpCoPjzuoa4GIcK6A4jmQo%3D&reserved=0" target="_blank" rel="noreferrer">
https://www.weboftrust.info/next-event-page.html</a><u></u><u></u></p>
<p class="MsoNormal"> Scheduled for September
26-30, 2022 in The Hague, Netherlands<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Open Pull Requests<u></u><u></u></p>
<p class="MsoNormal"> <a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbitbucket.org%2Fopenid%2Fconnect%2Fpull-requests%2F&data=05%7C01%7CKristina.Yasuda%40microsoft.com%7Cb603a5a31fc34e19e98108da1e5f4db1%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637855693434810420%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=5b6dkiSex1Td%2BKPK8DR8fSp1YB1L20IWAMRIw31xzqY%3D&reserved=0" target="_blank" rel="noreferrer">
https://bitbucket.org/openid/connect/pull-requests/</a><u></u><u></u></p>
<p class="MsoNormal"> PR #149: Credential Issuance
based on OAuth<u></u><u></u></p>
<p class="MsoNormal"> No longer uses
"openid" scope<u></u><u></u></p>
<p class="MsoNormal"> It
uses an "openid_credential" scope instead<u></u><u></u></p>
<p class="MsoNormal"> George asked
about other OpenID parameters that are used<u></u><u></u></p>
<p class="MsoNormal">
Torsten said that login_hint is used, but that it could be
removed<u></u><u></u></p>
<p class="MsoNormal"> RFC 7523 defines
private_key_jwt usage, for instance<u></u><u></u></p>
<p class="MsoNormal"> This replaces
the OpenID issuance flow with an OAuth-based one<u></u><u></u></p>
<p class="MsoNormal"> Kristina said
that an OpenID issuance flow could be layered on this<u></u><u></u></p>
<p class="MsoNormal"> Torsten said
that this uses RAR<u></u><u></u></p>
<p class="MsoNormal"> Kristina asked
if people wanted a week to review the PR<u></u><u></u></p>
<p class="MsoNormal">
People said yes<u></u><u></u></p>
<p class="MsoNormal"> We discussed the
branding of the spec<u></u><u></u></p>
<p class="MsoNormal">
It's no longer OpenID Connect<u></u><u></u></p>
<p class="MsoNormal">
But it is about identity<u></u><u></u></p>
<p class="MsoNormal">
OpenID for Credential Issuance is a possible brand<u></u><u></u></p>
<p class="MsoNormal"> Kristina said
that we want to merge this before IIW, ideally<u></u><u></u></p>
<p class="MsoNormal"> PR #156: [OIDC4VP] and an
example of presenting ISO/IEC 18013-5:2021 mDL<u></u><u></u></p>
<p class="MsoNormal"> Kristina asked
Kenichi to review<u></u><u></u></p>
<p class="MsoNormal"> Kristina
reviewed the PE syntax with others<u></u><u></u></p>
<p class="MsoNormal"> We also want to
merge this one before IIW<u></u><u></u></p>
<p class="MsoNormal"> PR #152: OP
Identification/Attestation<u></u><u></u></p>
<p class="MsoNormal"> This is about
providing the verifier information about the wallet<u></u><u></u></p>
<p class="MsoNormal"> It defines an OP
Attestation JWT<u></u><u></u></p>
<p class="MsoNormal"> It has an OP
identifier as the "iss" claim<u></u><u></u></p>
<p class="MsoNormal"> George asked
whether wallets are doing Dynamic Client Registration<u></u><u></u></p>
<p class="MsoNormal"> George asked
whether this is all self-asserted information<u></u><u></u></p>
<p class="MsoNormal">
Torsten said that it is bound to the ID Token<u></u><u></u></p>
<p class="MsoNormal"> Torsten asked
people to think about whether this should always be added<u></u><u></u></p>
<p class="MsoNormal"> George asked
about whether we should also have an application attestation<u></u><u></u></p>
<p class="MsoNormal"> Kristina
discussed the secure area used for the signatures on the
application<u></u><u></u></p>
<p class="MsoNormal">
Torsten said that this sounds like key attestation to him,
which is something different<u></u><u></u></p>
<p class="MsoNormal"> George asserted
that most users will want multi-device wallets<u></u><u></u></p>
<p class="MsoNormal"> George said that
the wallet may want more information about the application
talking to it<u></u><u></u></p>
<p class="MsoNormal"> Kristina asked
George to add his thoughts as issue comments<u></u><u></u></p>
<p class="MsoNormal"> PR #147: SIOP v2 Code Flow<u></u><u></u></p>
<p class="MsoNormal"> Kristina said
that we want to merge this before IIW<u></u><u></u></p>
<p class="MsoNormal"> Torsten added
functionality since last week<u></u><u></u></p>
<p class="MsoNormal"> Mike will review<u></u><u></u></p>
<p class="MsoNormal"> PR #148: SIOP support
metadata & Request SIOP<u></u><u></u></p>
<p class="MsoNormal"> This was also
updated based on feedback from last week's call<u></u><u></u></p>
<p class="MsoNormal"> Kristina said
that we also want to merge this before IIW<u></u><u></u></p>
<p class="MsoNormal"> George reviewed
and approved<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Open Issues<u></u><u></u></p>
<p class="MsoNormal"> <a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbitbucket.org%2Fopenid%2Fconnect%2Fissues%3Fstatus%3Dnew%26status%3Dopen&data=05%7C01%7CKristina.Yasuda%40microsoft.com%7Cb603a5a31fc34e19e98108da1e5f4db1%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637855693434810420%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=akDegYdK%2Bc76YJ9L4f9GEdNKJ%2FjcJxqPIp%2FGj2%2FSqdk%3D&reserved=0" target="_blank" rel="noreferrer">
https://bitbucket.org/openid/connect/issues?status=new&status=open</a><u></u><u></u></p>
<p class="MsoNormal"> #1470: SIOP response with
vp_token only?<u></u><u></u></p>
<p class="MsoNormal"> We will have a
session on this at IIW<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Next Call<u></u><u></u></p>
<p class="MsoNormal"> The next Connect call will be
on Monday, April 18, 2022 at 4pm Pacific Time<u></u><u></u></p>
</div>
<br>
<fieldset></fieldset>
<pre>_______________________________________________
Openid-specs-ab mailing list
<a href="mailto:Openid-specs-ab@lists.openid.net" target="_blank" rel="noreferrer">Openid-specs-ab@lists.openid.net</a>
<a href="https://lists.openid.net/mailman/listinfo/openid-specs-ab" target="_blank" rel="noreferrer">https://lists.openid.net/mailman/listinfo/openid-specs-ab</a>
</pre>
</blockquote>
</div>
_______________________________________________<br>
Openid-specs-ab mailing list<br>
<a href="mailto:Openid-specs-ab@lists.openid.net" target="_blank" rel="noreferrer">Openid-specs-ab@lists.openid.net</a><br>
<a href="https://lists.openid.net/mailman/listinfo/openid-specs-ab" rel="noreferrer noreferrer" target="_blank">https://lists.openid.net/mailman/listinfo/openid-specs-ab</a><br>
</blockquote></div>