[Openid-specs-digital-credentials-protocols] openid/oid4vc-haip-sd-jwt-vc: Comment created on issue 101

[github at oidf.org]

openid/oid4vc-haip-sd-jwt-vc event

Issue Comment created on issue 101
Issue Title: How does a credential issuer trust the wallet attestation issuer's public key?
https://github.com/openid/oid4vc-haip-sd-jwt-vc/issues/101

Comment: According to the last ARF version, both OpenID Federation and X.509 based PKI can be used for the satisfaction of the functional requirements of the infrastructure of trust therefore, having an issued Wallet Instance Attestation, we have the following elements: - An Issuer unique identifier (eg: HTTPs URL) - Optionally, a trust chain (eg: X.509 certificate chain or OpenID Federation Trust Chain) the benefit of using openid federation is that its trust chain carries also the metadata, the policies and the trust marks. See: https://italia.github.io/eudi-wallet-it-docs/versione-corrente/en/wallet-attestation.html#table-wallet-attestation-claim
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-digital-credentials-protocols/attachments/20240507/6fc9f073/attachment.html>