<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:"Yu Gothic";
panose-1:2 11 4 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
@font-face
{font-family:"\@Yu Gothic";
panose-1:2 11 4 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-ligatures:standardcontextual;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Ah, yes, I responded to a wrong thread. It was meant to be for “Issue #1831: OpenID4VCI: W3C data model based formats and the use of "types" vs "type" (openid/connect)”, to which torsten just responded to. Apologies for the confusion.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">A PR for this thread , is here: <a href="https://bitbucket.org/openid/connect/pull-requests/463">
https://bitbucket.org/openid/connect/pull-requests/463</a>.<o:p></o:p></p>
<p class="MsoNormal">(at least in my mind) the intension was never to require JSON-LD processing for anything other than the actual Credential expressed using JSON-LD, so no JSON-LD processing requirements for Credential Offer, Credential Issuer Metadata, etc.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Best,<o:p></o:p></p>
<p class="MsoNormal">Kristina<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Brian Campbell <bcampbell@pingidentity.com> <br>
<b>Sent:</b> Thursday, February 23, 2023 5:30 AM<br>
<b>To:</b> Kristina Yasuda <Kristina.Yasuda@microsoft.com><br>
<b>Cc:</b> Artifact Binding/Connect Working Group <openid-specs-ab@lists.openid.net><br>
<b>Subject:</b> Re: [Openid-specs-ab] OpenID4VCI: JSON-LD processing of request and metadata fields<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">In this email thread Judith had suggested that any requirements regarding JSON-LD processing of metadata or request parameters are not appropriate and should be removed. That made sense to my (admittedly limited) understanding of the discussion
and intent of the spec. And was what I was hoping wouldn't get lost. I don't think that PR touches on that at all.
<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">On Wed, Feb 22, 2023 at 8:28 PM Kristina Yasuda <<a href="mailto:Kristina.Yasuda@microsoft.com">Kristina.Yasuda@microsoft.com</a>> wrote:<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal">There is a PR addressing this topic: <a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbitbucket.org%2Fopenid%2Fconnect%2Fpull-requests%2F461%2Fchanged-types-claim-to-type-to-comply-with%3Flink_source%3Demail&data=05%7C01%7CKristina.Yasuda%40microsoft.com%7Cca8d3de7cdce43aeba3908db15a216e8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638127558170791878%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=gZECI18AOWmVYYrzf2oT0hbsjWs6hGWM71YUzfMVb7g%3D&reserved=0" target="_blank">https://bitbucket.org/openid/connect/pull-requests/461/changed-types-claim-to-type-to-comply-with</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Please review.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">The issue documenting the insights would be great too :)<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Cheers,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Kristina<o:p></o:p></p>
</div>
</div>
</div>
</div>
<div class="MsoNormal" align="center" style="text-align:center">
<hr size="2" width="98%" align="center">
</div>
<div id="m_862786968123189195divRplyFwdMsg">
<p class="MsoNormal"><b><span style="color:black">From:</span></b><span style="color:black"> Openid-specs-ab <<a href="mailto:openid-specs-ab-bounces@lists.openid.net" target="_blank">openid-specs-ab-bounces@lists.openid.net</a>> on behalf of Brian Campbell
via Openid-specs-ab <<a href="mailto:openid-specs-ab@lists.openid.net" target="_blank">openid-specs-ab@lists.openid.net</a>><br>
<b>Sent:</b> Wednesday, February 22, 2023 3:28:38 PM<br>
<b>To:</b> Artifact Binding/Connect Working Group <<a href="mailto:openid-specs-ab@lists.openid.net" target="_blank">openid-specs-ab@lists.openid.net</a>><br>
<b>Cc:</b> Brian Campbell <<a href="mailto:bcampbell@pingidentity.com" target="_blank">bcampbell@pingidentity.com</a>><br>
<b>Subject:</b> Re: [Openid-specs-ab] OpenID4VCI: JSON-LD processing of request and metadata fields</span>
<o:p></o:p></p>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
</div>
<div>
<div>
<div>
<p class="MsoNormal">Thanks for the insights Judith, <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Please do open an issue - I worry that the mailing list discussion will get lost in the noise and passage of time. Or not even seen by the document editors.
<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">On Sat, Feb 18, 2023 at 2:18 AM Judith Kahrer via Openid-specs-ab <<a href="mailto:openid-specs-ab@lists.openid.net" target="_blank">openid-specs-ab@lists.openid.net</a>> wrote:<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<p class="MsoNormal">Hi David, <o:p></o:p></p>
<div>
<p class="MsoNormal">Thanks for sharing your point of view and confirming some assumptions. I fully agree with you. The statement is not my opinion but was a quote from the current specification that did NOT refer to any verifiable credential but required JSON-LD
processing for a metadata field and request parameter (see <a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fopenid.net%2Fspecs%2Fopenid-4-verifiable-credential-issuance-1_0.html%23server_metadata_ldp_vc&data=05%7C01%7CKristina.Yasuda%40microsoft.com%7Cca8d3de7cdce43aeba3908db15a216e8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638127558170791878%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=4TGIGeR8btfLHlOOGxcPvtD8CbF8yHiI2cByMtIPehY%3D&reserved=0" target="_blank">E.1.3.2</a> and
<a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fopenid.net%2Fspecs%2Fopenid-4-verifiable-credential-issuance-1_0.html%23section-e.1.3.3&data=05%7C01%7CKristina.Yasuda%40microsoft.com%7Cca8d3de7cdce43aeba3908db15a216e8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638127558170791878%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=v0aJdhQNwfTrEGxzDxCY8SO5CZ5IAFGog09XWrKIpi4%3D&reserved=0" target="_blank">
E.1.3.3</a> in Appendix E of the current draft). I also think, that metadata and protocol defined in OpenID4VCI should be pure JSON and not JSON-LD. Consequently, the requirements regarding JSON-LD processing for <span style="font-family:"Courier New"">credentials_supported</span> and <span style="font-family:"Courier New"">credential_definition</span> should
be removed as those are part of the metadata and request respectively. They are not, once more, any credential (such can only be found in credential responses).<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Following that, any <span style="font-family:"Courier New"">@context</span>-field in an object that is NOT a credential, should be removed as well. I'll open an issue with suggested changes.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt">Regards, Judith <o:p></o:p></p>
<div>
<div>
<p class="MsoNormal">On Sat, Feb 18, 2023, 08:59 David Chadwick via Openid-specs-ab <<a href="mailto:openid-specs-ab@lists.openid.net" target="_blank">openid-specs-ab@lists.openid.net</a>> wrote:<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<p>Hi Judith<o:p></o:p></p>
<p>thankyou for your excellent response. I agree with most of what you say, but not the following "This object MUST be processed using full JSON-LD processing". It is my understanding that the protocol and metadata are pure JSON and should not be referred to
as JSON-LD. Thus the current text is wrong if it either states or implies this. OTOH, the retrieved object may be a W3C Conformant VC (in which case it MUST contain the @context property) but this does not mean that the wallet has to perform any JSON LD processing
on it. On the contrary pure JSON processing is sufficient if the semantics of JSON-LD are not required and JWT proofs are being used (I am not sure if the same is true for LD proofs). Interworking between JSON-LD processing and pure JSON processing issuers
and wallets has already been adequately demonstrated (in the JFF plugfest). So I do not believe having an @context property in a credential is an issue that OID4VCI should be concerned with. Personally I do not think that our protocol should be supporting
non-standard credential formats (i.e. any type of JWT) and should only support ISO mdl and W3C VCs either JWT or LD-proofed (but I think I am in a minority here). However, the W3C VC F2F this week has now agreed that verifiable credentials must have an @context
property. Other serialisations that do not contain an @context property may be specified, but mapping rules from these to W3C VCs must be defined for them to be accepted in the W3C VC v2 recommendation. The mapping may be one way (from serialisation X to W3C
VCs) or bi-directional and lossless. However, no examples of serialisation X have been fully specified so far, so until they are I do not think OID4VCI should include them (which currently it does).<o:p></o:p></p>
<p>Kind regards<o:p></o:p></p>
<p>David<o:p></o:p></p>
</div>
</blockquote>
</div>
</div>
<p class="MsoNormal">_______________________________________________<br>
Openid-specs-ab mailing list<br>
<a href="mailto:Openid-specs-ab@lists.openid.net" target="_blank">Openid-specs-ab@lists.openid.net</a><br>
<a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.openid.net%2Fmailman%2Flistinfo%2Fopenid-specs-ab&data=05%7C01%7CKristina.Yasuda%40microsoft.com%7Cca8d3de7cdce43aeba3908db15a216e8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638127558170791878%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=zSVPzQ%2FbbzityCgph3USYcZpO6ZadXnJGMJzro%2Byv%2FY%3D&reserved=0" target="_blank">https://lists.openid.net/mailman/listinfo/openid-specs-ab</a><o:p></o:p></p>
</blockquote>
</div>
</div>
</div>
<p class="MsoNormal"><br>
<b><i><span style="font-size:10.0pt;color:#555555;border:none windowtext 1.0pt;padding:0in;background:white">CONFIDENTIALITY NOTICE: This email may contain confidential and privileged material for the sole use of the intended recipient(s). Any review, use,
distribution or disclosure by others is strictly prohibited. If you have received this communication in error, please notify the sender immediately by e-mail and delete the message and any file attachments from your computer. Thank you.</span></i></b><o:p></o:p></p>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal"><br>
<b><i><span style="font-size:10.0pt;font-family:"Segoe UI",sans-serif;color:#555555;border:none windowtext 1.0pt;padding:0in;background:white">CONFIDENTIALITY NOTICE: This email may contain confidential and privileged material for the sole use of the intended
recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited. If you have received this communication in error, please notify the sender immediately by e-mail and delete the message and any file attachments from your computer.
Thank you.</span></i></b><o:p></o:p></p>
</div>
</body>
</html>