[Openid-specs-digital-credentials-protocols] [notes] APAC-friendly DCP WG + SIOP call (PST midday)

Wed Nov 20 10:01:05 UTC 2024

Hi all,

DCP working group meeting notes 2024-11-19

Participants:

Gail Hodges
Joseph Heenan
Kristana Yasuda
Brian Campbell
Christian Bormann
Daniel Fett
Gareth Oliver
Hicham Lozi
Lee Campbell
Michael Jones
Oliver Terbu
Steve Venema
Tom Jones
Paul Bastian
Martijn Haring

-OIDF AntiTrust policy-
Joseph opened the meeting and mentioned the OIDF AntiTrust policy.

-Introductions-
No new introductions.

-Agenda bashing and adoption-
The following agenda was adopted:

OIDF Antitrust Policy at www.openid.net/antitrust applies.
IPR reminder/ Note-taking.
Introductions/re-introductions.
Agenda bashing/adoption.
Events/External orgs.
1. Update from meeting with CEN.
VCI:
1. change credential type identifier vc+sd-jwt to dc+sd-jwt (5 minutes) https://github.com/openid/OpenID4VCI/pull/415
2. Define claims display description and claims path query (10 minutes) https://github.com/openid/OpenID4VCI/pull/276
3. Decide when to start VCI WGLC (5min)
VP:
1. ISO requirements and mdoc profile over browser API https://github.com/openid/OpenID4VP/issues/219
2. https://github.com/openid/OpenID4VP/issues/318

-Updates on external orgs-
Chairs had a quick meeting with CEN, request from them to work on wallet attestation. CEN will work on a liaison agreement with OIDF.

-VCI: change credential type identifier-
https://github.com/openid/OpenID4VCI/pull/415
Media type in the IETF draft from vc+sd-jwt to dc+sd-jwt. Therefore, request to change it in VCI as well.
No objections to the PR were made. There was a question whether it could about be merged already, to allow WGLC to start today if that’s what the group wants to do.

-VCI: Decide when to start VCI WGLC & claims description and claims path query-

Discussion started on whether to start the VCI WGLC. Kristina showed #276 and explained that this is a big enough change for it to warrant review as part of the ID, and not merge it after the ID. Ask was to merge it by next week.

3 options:
1. Close PR, do not make the change
2. Merge it in a week and start ID with this PR
3. Merge the PR after ID 

Christian Bormann, Brian Campbell, and others prefer option 2. Daniel Fett will try to finalize by PR by next week, but isn’t 100% certain whether it will be ready by next week.
If it’s ready, this could allow the WGLC to be started next week.

Everyone is asked to review this issue.

No objection to wait for this issue, meaning that the current plan is to merge #276 and #415 next week and start WGLC.

-VP: ISO requirements and mdoc profile over browser API-

Related issue: https://github.com/openid/OpenID4VP/issues/219

Joseph explained that the plan is to work on the ISO mdoc profile in an issue, get comments, and only then make a PR.

Kristina continued by showing a proposal for an mdoc profile https://docs.google.com/document/d/1liDKyQpONoBba1lzx8JD9PuPzCGRb91R1JHxe5GwZ18/edit?resourcekey=0-RIUJjPE350X7XXEtnFDSDg&tab=t.0 to be used for mdoc transmission over OpenID4VP for the browser API.

Kristina explained that she proposes to put the profile in the HAIP specification, but since there is not yet agreement where this profile will sit and it’s not the critical part of the proposal, that can be discussed later. 

Kristina then showed parts of the document to explain it. Among others, it was mentioned that:
- Single mdoc per DeviceResponse to align with DCQL query
- SessionTranscript is the structure used by ISO to be bound to the session.

Kristina asked whether there were any items that people wanted to discuss. 

A number of initial comments were made:
- Martijn asked about multiple DeviceResponse structures and how that’s impacted by DCQL. There was a discussion about the pros and cons of using a single DeviceResponse or multiple DeviceResponse. No conclusion yet, needs further discussion.
- Martijn asked about hashing of the info in the SessionTranscript. There was a discussion about this, next steps is to figure out the exact requirements for what is to be achieved with the hashing of the data 
- Martijn asked about requirements for supporting optional parts of DCQL. It was mentioned that it’s to be added to the proposal.
- Martijn asked about the encryption mechanism. Kristina mentioned this was the initial proposal, but changes could be made after discussion.

It was asked whether there were strong objections to moving this to a PR. 
Martijn mentioned that he has only seen the parts of the document that were shown during the meeting, so no strong objections but also no agreement yet on the text.
No other objections were raised.

-VP: Wallet Attestation in OpenID4VP  https://github.com/openid/OpenID4VP/issues/318-

Christian Bormann asked about the next steps for #318. Indicating that there currently is no consensus in the PR with the approach from the PR. An alternative would be to use a mechanism in DCQL itself. Christian asked what the group prefers.

Daniel Fett and Hicham Lozi questioned the benefits of the approach from #318 and mentioned a preference for using DCQL.  It was briefly discussed whether, if DCQL is used, there should be a special indicator for wallet attestation or not. 

Christian mentioned he is also leaning to using DCQL and asked for a bit of time in the Thursday meeting to discuss this item and hopefully close it.

-Meeting closed-

Martijn

> On 19 Nov 2024, at 19:23, Joseph Heenan via Openid-specs-digital-credentials-protocols <openid-specs-digital-credentials-protocols at lists.openid.net> wrote:
> 
> Hi All,
>  
> Below is the suggested agenda for today's DCP WG + SIOP call at 12:00 midday PT, https://zoom.us/j/94085567252?pwd=cHNFMExFalhlM2MrOFhoN3J6eDRuZz09
> 
> OIDF Antitrust Policy at www.openid.net/antitrust <http://www.openid.net/antitrust> applies
> IPR reminder/ Note-taking
> Introductions/re-introductions
> Agenda bashing/adoption
> Events/External orgs
> Update from meeting with CEN
> VCI:
> change credential type identifier vc+sd-jwt to dc+sd-jwt (5 minutes) https://github.com/openid/OpenID4VCI/pull/415
> Define claims display description and claims path query (10 minutes) https://github.com/openid/OpenID4VCI/pull/276
> Decide when to start VCI WGLC (5min)
> VP:
> ISO requirements and mdoc profile over browser API https://github.com/openid/OpenID4VP/issues/219
>  <https://github.com/openid/OpenID4VP/issues/219>
> 
> Thanks
> 
> Joseph
> 
> -- 
> Openid-specs-digital-credentials-protocols mailing list
> Openid-specs-digital-credentials-protocols at lists.openid.net
> https://lists.openid.net/mailman/listinfo/openid-specs-digital-credentials-protocols

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-digital-credentials-protocols/attachments/20241120/0cc34f64/attachment.htm>