[Openid-specs-digital-credentials-protocols] [agenda] DCP WG + SIOP call

Jan Vereecken jan.vereecken at meeco.me
Thu Nov 28 19:09:29 UTC 2024


Hello Everyone,

Please find below meeting minutes. Thank you, Joseph, for the last two bullets!

See you next time.

Regards,
Jan

====

# DCP Meeting - 2024/11/28

## Attendees

Andreea Prian
Daniel Fett
David Chadwick
Jan Vereecken
Joseph Heenan
Kristina Yasuda
Lee Campbell
Lukasz Jaromin
Oliver Terbu
Torsten Lodderstedt


## Agenda

1     OIDF Antitrust Policy at [www.openid.net/antitrust](http://www.openid.net/antitrust) applies
2     IPR reminder/ Note-taking
3     Introductions/re-introductions
4     Agenda bashing/adoption
5     Events/External orgs
6     VCI (starting WGLC once we merge 276):
      1     Define claims display description and claims path query <https://github.com/openid/OpenID4VCI/pull/276>
      2     trying to merge 408 and 419 before ID if possible
7     VP
      1     a lot of new PRs, important for ISO and ID process: <https://github.com/openid/OpenID4VP/pulls>
      **2   Issues Important to resolve before ISO mtg Dec 3-5th (today is the last call with full participation before the ISO mtg since next week is Thanksgiving) **
            1     mandatory processing in claims set <https://github.com/openid/OpenID4VP/issues/290>
            2     value matching: <https://github.com/openid/OpenID4VP/issues/322> and <https://github.com/openid/OpenID4VP/issues/307>
            3     x509\_san\_dns: <https://github.com/openid/OpenID4VP/issues/320>
**8   HAIP**
      **1   mdoc profile for OID4VP over Browser API **PR is in: <https://github.com/openid/oid4vc-haip-sd-jwt-vc/pull/122>
      2     adding sd-jwt vcdm to HAIP?

## Notes

### OIDVP ID finalisation

Finalising the draft that will be used for the vote of a new Implementors Draft (ID-3).
Discussing 3 PRs.

- PR 339

Workshopping what profiling is.

- PR 340

Kristina accepts all Daniel’s suggestions.
Kristina addresses Torsten’s comment about allowing other credential format profiles

- PR 337

Intention to get this into the ID

**Action**: Request for reviews on above PRs

### VCI

- PR276: Define claims display description and claims path query <https://github.com/openid/OpenID4VCI/pull/276>

MUST NOT changed to SHOULD NOT for a number of params

Daniel suggests to move 2 comments to separate issues

**Action**: Kristina is going to create the issues

- Trying to merge 408 and 419 before ID if possible

PR419: No discussion
PR409: Paul Bastian to review this


### VP

- I320: x509\_san\_dns: <https://github.com/openid/OpenID4VP/issues/320>

Suggestion to introduce a new client_id_scheme, e.g. `x509_thumbprint`, to mitigate issues that Martijn raises wrt DC API.
Discussion on the importance of the client ID.
David suggests to use what browsers show already with certificates. Lee says this is calculated in Chrome.
Daniel and Kristina mention that hashing of certificates are already being used, but no reference have been found.

- I293 : DCQL namespace & claim\_name vs path

Kristina asked if there’s any consensus on using “path” for mdocs instead of namespace/claim\_name.

Lee found it annoying to implement how it was and it would be much easier to implement if path was used instead of namespace/claim\_name, it means you can normalise credentials into an internal description regardless of format.

Daniel thought that was a fair argument.

Oliver might have been in agreement.

Rough direction to change this, but agreed not to change it before the vote starting next week.


### HAIP

- I128: adding sd-jwt vcdm to HAIP

Jan is asking clarification what SD-JWT VCDM is and how it relates to https://www.w3.org/TR/vc-jose-cose/.
Daniel explains how it is different from W3C VCDM secured using SD-JWT.
Oliver points out differences (e.g. schema, status, rendering) between W3C VCDM and SD-JWT VCDM

**Action**: Kristina is suggesting to create a PR

### ISO-OIDF alignment

Kristina showed a google doc on screen that was also shared as attachment in the mailing list. No actions.

### Final word from Daniel:

OSW is looking for additional sponsors to help them keep the ticket price for attendees low, if anyone's company might be interested please contact Daniel.
<https://oauth.secworkshop.events/osw2025>


________________________________
From: Openid-specs-digital-credentials-protocols <openid-specs-digital-credentials-protocols-bounces at lists.openid.net> on behalf of Kristina Yasuda via Openid-specs-digital-credentials-protocols <openid-specs-digital-credentials-protocols at lists.openid.net>
Sent: Thursday, 28 November 2024 15:29
To: Digital Credentials Protocols List <openid-specs-digital-credentials-protocols at lists.openid.net>
Cc: Kristina Yasuda <yasudakristina at gmail.com>
Subject: [Openid-specs-digital-credentials-protocols] [agenda] DCP WG + SIOP call

Hi All,

Below is the suggested agenda for today's DCP WG + SIOP call: https://zoom.us/j/94085567252?pwd=cHNFMExFalhlM2MrOFhoN3J6eDRuZz09

As agreed in the last call, we will not make decisions on contentious topics today, since we expect a lot of US people celebrating and not attending the call (please enjoy!). We will continue getting input on ISO related issues/PRs, moving VCI towards ID and reviewing other outstanding issues.

  1.  OIDF Antitrust Policy at www.openid.net/antitrust<http://www.openid.net/antitrust> applies
  2.  IPR reminder/ Note-taking
  3.  Introductions/re-introductions
  4.  Agenda bashing/adoption
  5.  Events/External orgs
  6.  VCI (starting WGLC once we merge 276):
     *   Define claims display description and claims path query https://github.com/openid/OpenID4VCI/pull/276
     *   trying to merge 408 and 419 before ID if possible
  7.  VP
     *   a lot of new PRs, important for ISO and ID process: https://github.com/openid/OpenID4VP/pulls
     *   Issues Important to resolve before ISO mtg Dec 3-5th (today is the last call with full participation before the ISO mtg since next week is Thanksgiving)
        *   mandatory processing in claims set https://github.com/openid/OpenID4VP/issues/290
        *   value matching: https://github.com/openid/OpenID4VP/issues/322 and https://github.com/openid/OpenID4VP/issues/307
        *   x509_san_dns: https://github.com/openid/OpenID4VP/issues/320
  8.  HAIP
     *   mdoc profile for OID4VP over Browser API PR is in: https://github.com/openid/oid4vc-haip-sd-jwt-vc/pull/122
     *   adding sd-jwt vcdm to HAIP?

Thank you!
Kristina
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-digital-credentials-protocols/attachments/20241128/bda6a98d/attachment-0001.htm>


More information about the Openid-specs-digital-credentials-protocols mailing list