<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">Am 18.04.2022 um 21:01 schrieb Mike Jones via Openid-specs-ab <<a href="mailto:openid-specs-ab@lists.openid.net" class="">openid-specs-ab@lists.openid.net</a>>:</div><br class="Apple-interchange-newline"><div class=""><meta charset="UTF-8" class=""><div class="WordSection1" style="page: WordSection1; caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">"User-Centric" is an established and positive term in the industry that more closely matches the scope of all that we're achieving than does "Decentralized". Per my comments in the doc, while decentralized data structures have their place, many aspects of User-Centric Identity are achievable without decentralized data structures.</div></div></div></blockquote><div><br class=""></div>That’s certainly true and one of the reasons why even centralised OpenID Connect deployments embrace the user centricity principle. However, the work we are talking about here is more specific since it assumes more control of the user and a decoupling of claims sources and RPs/Verifiers via a SIOP/wallet. I therefore think "User Centricity" is too generic to be a good designation for this work. </div><div><br class=""><blockquote type="cite" class=""><div class=""><div class="WordSection1" style="page: WordSection1; caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">See the proposed definitions of "User-Centric" and "User-Centric Identity" in the Terminology section. I would assert that it would be difficult to instead have a definition of "Decentralized" that made sense by itself and still encompassed the full scope of what we're achieving. Whereas adding definitions for “User-Centric” and “User-Centric Identity” tie the whole thing together.<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Please see my proposed edits in the doc. I believe you’ll find that using the term “User-Centric Identity” makes more sense than “Decentralized Identity” in the context of our messages.<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> Best wishes,<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> -- Mike<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div class=""><div style="border-style: solid none none; border-top-width: 1pt; border-top-color: rgb(225, 225, 225); padding: 3pt 0in 0in;" class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><b class="">From:</b><span class="Apple-converted-space"> </span>Openid-specs-ab <<a href="mailto:openid-specs-ab-bounces@lists.openid.net" style="color: rgb(5, 99, 193); text-decoration: underline;" class="">openid-specs-ab-bounces@lists.openid.net</a>><span class="Apple-converted-space"> </span><b class="">On Behalf Of<span class="Apple-converted-space"> </span></b>Kristina Yasuda via Openid-specs-ab<br class=""><b class="">Sent:</b><span class="Apple-converted-space"> </span>Monday, April 18, 2022 11:55 AM<br class=""><b class="">To:</b><span class="Apple-converted-space"> </span>Artifact Binding/Connect Working Group <<a href="mailto:openid-specs-ab@lists.openid.net" style="color: rgb(5, 99, 193); text-decoration: underline;" class="">openid-specs-ab@lists.openid.net</a>><br class=""><b class="">Cc:</b><span class="Apple-converted-space"> </span>Kristina Yasuda <<a href="mailto:Kristina.Yasuda@microsoft.com" style="color: rgb(5, 99, 193); text-decoration: underline;" class="">Kristina.Yasuda@microsoft.com</a>><br class=""><b class="">Subject:</b><span class="Apple-converted-space"> </span>Re: [Openid-specs-ab] whitepaper, PRs, and the next Atlantic Connect call RE: SIOP Special Topic Call Notes 14-Apr-22<o:p class=""></o:p></div></div></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Do we agree that we are looking for a term that characterizes a model where “an End-User presents a cryptographically verifiable credential (not necessarily W3C VC data model, but in a more generic definition) directly to the verifier without verifier needing to talk to the issuer”?<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">If we do, what is the best word?<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">If we are looking for a term to characterize an above-mentioned model, I would want to avoid “Self-Sovereign”, or even “Self-Issued”. Credentials presented by the user are issued by the Issuer and are not “Self-Issued” by the End-User; It’s up to the RP/Verifier to decide if they will accept credentials presented by the End-User, so it’s not “Self-sovereign”.<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">When proposing OpenID for Decentralized Identity, I did not have in mind an absolute necessity of DIDs, but the above-mentioned model. So, it’s interesting to learn that you automatically associated a term “Decentralized Identity” to DIDs.<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">For me “user-centric”/”Direct Presentation” has been the most appealing term, though I fear it might be a little too generic.<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Best,<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Kristina<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">---<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Copying Giuseppe’s preferences below, since I chose to respond to David’s email for more context.<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">“In order of personal preference:<br class=""><br class="">1. OID4SSI<br class="">2. SIOID (Self Issued OpenID)<br class="">3. OID4SIOPv2 (even if we should consider that the specs cover more than the SIOP)<br class="">4. OID4UC<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">“<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div class=""><div style="border-style: solid none none; border-top-width: 1pt; border-top-color: rgb(225, 225, 225); padding: 3pt 0in 0in;" class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><b class="">From:</b><span class="Apple-converted-space"> </span>Openid-specs-ab <<a href="mailto:openid-specs-ab-bounces@lists.openid.net" style="color: rgb(5, 99, 193); text-decoration: underline;" class="">openid-specs-ab-bounces@lists.openid.net</a>><span class="Apple-converted-space"> </span><b class="">On Behalf Of<span class="Apple-converted-space"> </span></b>David Chadwick via Openid-specs-ab<br class=""><b class="">Sent:</b><span class="Apple-converted-space"> </span>Monday, April 18, 2022 9:08 AM<br class=""><b class="">To:</b><span class="Apple-converted-space"> </span><a href="mailto:openid-specs-ab@lists.openid.net" style="color: rgb(5, 99, 193); text-decoration: underline;" class="">openid-specs-ab@lists.openid.net</a><br class=""><b class="">Cc:</b><span class="Apple-converted-space"> </span>David Chadwick <<a href="mailto:d.w.chadwick@verifiablecredentials.info" style="color: rgb(5, 99, 193); text-decoration: underline;" class="">d.w.chadwick@verifiablecredentials.info</a>><br class=""><b class="">Subject:</b><span class="Apple-converted-space"> </span>Re: [Openid-specs-ab] whitepaper, PRs, and the next Atlantic Connect call RE: SIOP Special Topic Call Notes 14-Apr-22<o:p class=""></o:p></div></div></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><p class=""><o:p class=""> </o:p></p><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">On 14/04/2022 23:18, Kristina Yasuda via Openid-specs-ab wrote:<o:p class=""></o:p></div></div><blockquote style="margin-top: 5pt; margin-bottom: 5pt;" class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Thanks for the notes, Mike!<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Following up with one question and two asks on whitepaper, PRs, and the next Atlantic Connect call.<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Regarding the Whitepaper. We would like to get<span class="Apple-converted-space"> </span><b class="">WG’s input regarding the naming (branding) of the work</b>.<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">We are making a change to base Credential Issuance specification on Oauth2.0 rather than OpenID Connect (PR #149). However, because the issuance is about identity assertions, we discussed that we want to keep using OpenID (note: no Connect after OpenID).<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">What would people think<span class="Apple-converted-space"> </span><b class="">of “OpenID for Decentralized Identity (OpenID4DI)”</b><span class="Apple-converted-space"> </span>naming for the specification family of SIOPv2, OIDC4VP and OpenID4CI (OpenID for Credential Issuance)?<o:p class=""></o:p></div></blockquote><p class="">Whilst it is true that the specs cater for DIDs, they also cater for VCs and mDLs, but none of these technologies are mandatory to implement. Therefore using the term DI in the title is misleading. Rather we need a generic term that implies all 3 of these technologies may be including without naming or mandating any of them. Suggestions are self-sovereign identity SSI (OID4SSI) or User Control (OID4UC) or SIOP (OID4SIOPv2) or ...<add your suggestion here><o:p class=""></o:p></p><p class="">Kind regards<o:p class=""></o:p></p><p class="">David<o:p class=""></o:p></p><p class=""><o:p class=""> </o:p></p><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Since people are so used to calling our work “SIOP”, maybe a better idea is to<span class="Apple-converted-space"> </span><b class="">call the entire body of work “SIOPv2”</b><span class="Apple-converted-space"> </span>as an alternative….<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">And again, huge thank you to Jo, David C., Torsten and Kenichi for being the lead editors and actively contributing to the whitepaper!<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">On behalf of the editors of SIOPv2, OIDC4VP, OpenID4CI specs, I also wanted to highlight that we are trying to make as much progress as possible before IIW, OSW and EIC.<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><b class="">Please, please review the PRs and related issues and explicitly note if you approve, have no objections, or want to request changes</b><span class="Apple-converted-space"> </span>– you can use whatever is convenient to you – make a comment, clicking an Approve/Request Changes button, or directly tell the feedback to the editors.<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">I would also like to ask if we can<span class="Apple-converted-space"> </span><b class="">spend at least half of the next week’s Atlantic Connect WG call (the one before the SIOP call) on OpenID4DI related issues</b>, since I think we need more time than a SIOP call to cover all the important ones prior to IIW.<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Thank you very much!<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Kristina<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div><div class=""><div style="border-style: solid none none; border-top-width: 1pt; border-top-color: rgb(225, 225, 225); padding: 3pt 0in 0in;" class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><b class="">From:</b><span class="Apple-converted-space"> </span>Openid-specs-ab<span class="Apple-converted-space"> </span><a href="mailto:openid-specs-ab-bounces@lists.openid.net" style="color: rgb(5, 99, 193); text-decoration: underline;" class=""><openid-specs-ab-bounces@lists.openid.net></a><span class="Apple-converted-space"> </span><b class="">On Behalf Of<span class="Apple-converted-space"> </span></b>Mike Jones via Openid-specs-ab<br class=""><b class="">Sent:</b><span class="Apple-converted-space"> </span>Thursday, April 14, 2022 2:40 PM<br class=""><b class="">To:</b><span class="Apple-converted-space"> </span><a href="mailto:openid-specs-ab@lists.openid.net" style="color: rgb(5, 99, 193); text-decoration: underline;" class="">openid-specs-ab@lists.openid.net</a><br class=""><b class="">Cc:</b><span class="Apple-converted-space"> </span>Mike Jones<span class="Apple-converted-space"> </span><a href="mailto:Michael.Jones@microsoft.com" style="color: rgb(5, 99, 193); text-decoration: underline;" class=""><Michael.Jones@microsoft.com></a><br class=""><b class="">Subject:</b><span class="Apple-converted-space"> </span>[Openid-specs-ab] SIOP Special Topic Call Notes 14-Apr-22<o:p class=""></o:p></div></div></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">SIOP Special Topic Call Notes 14-Apr-22<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Mike Jones<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Kristina Yasuda<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Brian Campbell<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Charlie Fontana<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Petteri Stenius<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Torsten Lodderstedt<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Kenichi Nakamura<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Ben (bengo)<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">David Schmudde<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Joseph Heenan<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Juan Caballero<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">George Fletcher<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Petteri Stenius<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Jo Vercammen<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">David Waite<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">SIOP Whitepaper<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> A draft is available<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <span class="Apple-converted-space"> </span><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1H556GIM_xD1yKl7rw1seq4bu83movFCkU8fQ7T8b1dI%2Fedit&data=05%7C01%7CKristina.Yasuda%40microsoft.com%7C908e2849c2294a93433808da21559a0f%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637858950319054394%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=0ZHkJCvbwpiCl1wSm1BrmQy9rg49rMl29kPuKtcVnXk%3D&reserved=0" style="color: rgb(5, 99, 193); text-decoration: underline;" class="">https://docs.google.com/document/d/1H556GIM_xD1yKl7rw1seq4bu83movFCkU8fQ7T8b1dI/edit</a><o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> The plan is to publish it on<span class="Apple-converted-space"> </span><a href="http://openid.net/" style="color: rgb(5, 99, 193); text-decoration: underline;" class="">openid.net</a><o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">SIOP Call Schedule<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> Kristina asked whether to move the SIOP Special Topic call to always be at 8am Pacific Time<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> This would make the call time consistent week-to-week<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> People were supportive of the change<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Rebooting the Web of Trust (RWoT)<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <span class="Apple-converted-space"> </span><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.weboftrust.info%2Fnext-event-page.html&data=05%7C01%7CKristina.Yasuda%40microsoft.com%7C908e2849c2294a93433808da21559a0f%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637858950319054394%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=lSUSCZ6MSOIe%2BGDq%2B0%2BmSWZK%2FteiFw1mUIwTVtJc5lg%3D&reserved=0" style="color: rgb(5, 99, 193); text-decoration: underline;" class="">https://www.weboftrust.info/next-event-page.html</a><o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> Scheduled for September 26-30, 2022 in The Hague, Netherlands<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Open Pull Requests<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <span class="Apple-converted-space"> </span><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbitbucket.org%2Fopenid%2Fconnect%2Fpull-requests%2F&data=05%7C01%7CKristina.Yasuda%40microsoft.com%7C908e2849c2294a93433808da21559a0f%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637858950319054394%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=WZ238oXBaHMpgpQLQyhgtNk7KXPwNHys3IZNQjlsr5Q%3D&reserved=0" style="color: rgb(5, 99, 193); text-decoration: underline;" class="">https://bitbucket.org/openid/connect/pull-requests/</a><o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> PR #149: Credential Issuance based on OAuth<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> No longer uses "openid" scope<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> It uses an "openid_credential" scope instead<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> George asked about other OpenID parameters that are used<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> Torsten said that login_hint is used, but that it could be removed<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> RFC 7523 defines private_key_jwt usage, for instance<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> This replaces the OpenID issuance flow with an OAuth-based one<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> Kristina said that an OpenID issuance flow could be layered on this<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> Torsten said that this uses RAR<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> Kristina asked if people wanted a week to review the PR<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> People said yes<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> We discussed the branding of the spec<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> It's no longer OpenID Connect<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> But it is about identity<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> OpenID for Credential Issuance is a possible brand<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> Kristina said that we want to merge this before IIW, ideally<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> PR #156: [OIDC4VP] and an example of presenting ISO/IEC 18013-5:2021 mDL<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> Kristina asked Kenichi to review<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> Kristina reviewed the PE syntax with others<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> We also want to merge this one before IIW<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> PR #152: OP Identification/Attestation<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> This is about providing the verifier information about the wallet<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> It defines an OP Attestation JWT<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> It has an OP identifier as the "iss" claim<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> George asked whether wallets are doing Dynamic Client Registration<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> George asked whether this is all self-asserted information<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> Torsten said that it is bound to the ID Token<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> Torsten asked people to think about whether this should always be added<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> George asked about whether we should also have an application attestation<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> Kristina discussed the secure area used for the signatures on the application<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> Torsten said that this sounds like key attestation to him, which is something different<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> George asserted that most users will want multi-device wallets<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> George said that the wallet may want more information about the application talking to it<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> Kristina asked George to add his thoughts as issue comments<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> PR #147: SIOP v2 Code Flow<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> Kristina said that we want to merge this before IIW<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> Torsten added functionality since last week<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> Mike will review<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> PR #148: SIOP support metadata & Request SIOP<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> This was also updated based on feedback from last week's call<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> Kristina said that we also want to merge this before IIW<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> George reviewed and approved<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Open Issues<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <span class="Apple-converted-space"> </span><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbitbucket.org%2Fopenid%2Fconnect%2Fissues%3Fstatus%3Dnew%26status%3Dopen&data=05%7C01%7CKristina.Yasuda%40microsoft.com%7C908e2849c2294a93433808da21559a0f%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637858950319054394%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=S1mpaZ%2FzX1dcotmQqLdunCFlKoYFP6nF2ImbH6%2B3fZU%3D&reserved=0" style="color: rgb(5, 99, 193); text-decoration: underline;" class="">https://bitbucket.org/openid/connect/issues?status=new&status=open</a><o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> #1470: SIOP response with vp_token only?<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> We will have a session on this at IIW<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Next Call<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> The next Connect call will be on Monday, April 18, 2022 at 4pm Pacific Time<o:p class=""></o:p></div><p class="MsoNormal" style="margin: 0in 0in 12pt; font-size: 11pt; font-family: Calibri, sans-serif;"><o:p class=""> </o:p></p><pre style="margin: 0in; font-size: 10pt; font-family: "Courier New";" class="">_______________________________________________<o:p class=""></o:p></pre><pre style="margin: 0in; font-size: 10pt; font-family: "Courier New";" class="">Openid-specs-ab mailing list<o:p class=""></o:p></pre><pre style="margin: 0in; font-size: 10pt; font-family: "Courier New";" class=""><a href="mailto:Openid-specs-ab@lists.openid.net" style="color: rgb(5, 99, 193); text-decoration: underline;" class="">Openid-specs-ab@lists.openid.net</a><o:p class=""></o:p></pre><pre style="margin: 0in; font-size: 10pt; font-family: "Courier New";" class=""><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.openid.net%2Fmailman%2Flistinfo%2Fopenid-specs-ab&data=05%7C01%7CKristina.Yasuda%40microsoft.com%7C908e2849c2294a93433808da21559a0f%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637858950319054394%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=%2FHRKdWZZkdCpMB5umVFEOdFW9jto9ZCtwmFz8JUeXMM%3D&reserved=0" style="color: rgb(5, 99, 193); text-decoration: underline;" class="">https://lists.openid.net/mailman/listinfo/openid-specs-ab</a><o:p class=""></o:p></pre></div><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">_______________________________________________</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">Openid-specs-ab mailing list</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><a href="mailto:Openid-specs-ab@lists.openid.net" style="color: rgb(5, 99, 193); text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">Openid-specs-ab@lists.openid.net</a><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><a href="https://lists.openid.net/mailman/listinfo/openid-specs-ab" style="color: rgb(5, 99, 193); text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">https://lists.openid.net/mailman/listinfo/openid-specs-ab</a></div></blockquote></div><br class=""></body></html>