[Openid-specs-digital-credentials-protocols] Security and Trust document

[Tom Jones]

One major problem with the OAuth model and this contribution is the
conflation of the subject and the holder.
To be inclusive these two roles may be entirely different entities.
It seems to be that this conflation must be excised if OAuth is to be
acceptected as the digital credential model to be used for government
supplied rights and privileges.

..tom


On Mon, Sep 11, 2023 at 8:14 AM Daniel Fett via
Openid-specs-digital-credentials-protocols <
openid-specs-digital-credentials-protocols at lists.openid.net> wrote:

> Hi all,
>
> I'd like to contribute the "Security and Trust" document to the DCP WG:
> https://github.com/vcstuff/oid4vc-security-and-trust
>
> It has been discussed earlier, but had no official status so far.
>
> -Daniel
> --
> Openid-specs-digital-credentials-protocols mailing list
> Openid-specs-digital-credentials-protocols at lists.openid.net
>
> https://lists.openid.net/mailman/listinfo/openid-specs-digital-credentials-protocols
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-digital-credentials-protocols/attachments/20230912/2976be26/attachment.html>