<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title></title>
</head>
<body>
<div name="messageBodySection">
<div dir="auto">SIOP Special Topic Call Notes 25–May-23<br />
<br />
Kristina Yasuda<br />
Ali Farmer<br />
Jelle Millenaar<br />
Nander Stable<br />
Sudesha Shetty<br />
Brian Campbell<br />
Takahiko Kawasaki<br />
Giuseppe de Marco<br />
Christian Bormann<br />
Oliver Terbu<br />
Victor Lu<br />
Torsten Lodderstedt<br />
<br />
Introductions<br />
Ali Farmer - CTO Forgerock<br />
Jelle Millenaar - Impierce<br />
Nander Stable - Impierce<br />
Sudesha Shetty - Gen Digital<br />
<br />
PR 519 & 520 - enhances spec to tell wallet what scope values to use for requesting certain credentials. Both PRs are motivated by the high assurance profile’s assumption that scope is the mandatory to implement mechanism for requesting credentials<br />
Taka pointed out: the AS needs to recognize the scope values from the issuer’s metadata and/or the credential offer<br />
PR 485 - client id schemes for authentication with x.509 certificates<br />
PR 523 - aims at fixing Issue #1932 (CWT proof type)<br />
Giuseppe - trust_chain JWS header now available in OpenID Connect Federation, suggests adding it to OID4VCI - Giuseppe will file an issue describing details. <br />
There is a workshop on digital identity in the first week of June https://st.fbk.eu/events/TDI2023/program, Giuseppe is presenting there<br />
Issue 1941 - requests addition of encrypted response from the credential issuance<br />
<span style="white-space:pre"> Brian: credential issuer is less tightly coupled to AS than Userinfo</span><br />
<span style="white-space:pre"> Giuseppe: in Italy nested JWT is used to encrypt Userinfo response, propose to use public key from wallet attestation for encryption. </span><br />
<span style="white-space:pre"> Oliver: static vs ephemeral keys - prefer ephemeral but would not be able to use client metadata, but client metadata might not be a good idea anyway</span><br />
<span style="white-space:pre"> Taka: share key through access token</span><br />
<span style="white-space:pre"> Oliver: parameter with key would be preferable</span><br />
<span style="white-space:pre"> Torsten: +1</span><br /></div>
</div>
</body>
</html>