[Openid-dcp] DCP WG agenda

[Oliver Terbu]

My apologies for the delay. Here are the meeting minutes from last week's call on 5/13/2025.

# Attendees

- Oliver Terbu
- Torsten Lodderstedt
- Joseph Heenan
- Kristina Yasuda
- Brian Campbell
- Christian Bormann
- Daniel Fett
- Martijn Harring
- Robert Gallagher
- Michael Jones
- Oriol Canades Diez
- Rajvardhan Deshmukh
- Andrew Regenscheid
- Lee Campbell
- Gail Hodges
- Bjorn Hjelm
- Tim Cappalli
- Hicham Lozi
- Mirko Mollik
- Gareth Oliver

# OIDF antitrust policy

OIDF Antitrust Policy at www.openid.net/antitrust applies / IPR reminder

# Other updates

>From Gail:

DCP WG reminder We are targeting interop of OID4VCI on 5/27 730-9am PT, and then OID4VP v28 + latest chrome 138+ HAIP+DCQL on 6/17 (two sessions, Atlantic and Pacific). Exact scope of testing in development, but designed to go a step past 5/5, on route to validate specs/tests before they move to final.

Note: NIST NCCoE architecture / mutlithreaded verifier may be tested a bit later in July.

If you are not currently an interop participant, and you  are interested in taking part email gail at oidf.org. We are trying to add other implementers when they are ready, requirements are to (1) pass OIDF open source tests, (2) signed DCP WG contribution agreement.

# Intros

Robert first call
Oriol second call

# OID4VP Issues and PRs

## Issue 561

Reject request if signature cannot be validated, or wallet can do whatever in certain ecosystems.

-> some discussion and clarification on PR 598

Agreed on direction and PR needs to be modified to be more general/generic and applicable to all client ID schemes/prefixes.

This applies only for signed requests over DC API: "it is up to the ecosystem/policy to decide whether to signature validation is mandatory or not".
- multi signature case is this one.
- need to be clear that wallet needs to determine which ecosystem/policy governs this.

for vanilla openid4vp, wallet MUST validate the request signature when client id scheme requires signature.

DCP WG to review PR and finetune on Tuesday.

## Issue 347

DCP WG reconfirmed direction.

Has PR -> #597

# OID4VCI Issues and PRs

# Issue 491

waiting for IETF OAuth WG discussion on Nonce Endpoint; hopefully PR next week

# Issue 480

no update

# Issue 473

issue is on track, Daniel/Mirko will do PR; agreed to align with first-party draft.

# Issue 376

Joseph will take care

# PR 495

some discussion on fully specified algorithms. members please review PR.

# Issue 339

DCP WG agreed issue is ready for PR.

# Issue 275

provide feedback or else pending close

# Issue 61

stretch goal and might be pushed to 1.1


________________________________
From: Openid-specs-digital-credentials-protocols <openid-specs-digital-credentials-protocols-bounces at lists.openid.net> on behalf of Kristina Yasuda via Openid-specs-digital-credentials-protocols <openid-specs-digital-credentials-protocols at lists.openid.net>
Sent: Tuesday, May 13, 2025 11:11 AM
To: Digital Credentials Protocols List <openid-specs-digital-credentials-protocols at lists.openid.net>; martijn_haring at apple.com <martijn_haring at apple.com>
Cc: Kristina Yasuda <yasudakristina at gmail.com>
Subject: [Openid-dcp] DCP WG agenda

EXTERNAL EMAIL: This email originated outside of our organisation. Do not click links or open attachments unless you recognise the sender and know the content is safe.

Hi All,

Below is proposed agenda for today’s call:

  1.  OIDF Antitrust Policy at www.openid.net/antitrust<http://www.openid.net/antitrust> applies / IPR reminder
  2.  Note-taking
  3.  Updates
  4.  OpenID4VP
     *   make sure PRs are on the way for these two remaining issues: https://github.com/openid/OpenID4VP/issues?q=is%3Aissue%20state%3Aopen%20label%3Adiscuss
     *   Please review Privacy Considerations PR: https://github.com/openid/OpenID4VP/pull/509. As discussed during EIC Hybrid WG mtg, not everything might belong in OpenID4VP spec.
  5.  OpenID4VCI
     *   VCI Final 1.0 priority Issues<https://github.com/openid/OpenID4VCI/issues?q=is%3Aissue%20state%3Aopen%20milestone%3A%22Final%201.0%22%20-label%3Aready-for-PR%20-label%3Ahas-PR%20-label%3A%22pending%20close%22>
        *   https://github.com/openid/OpenID4VCI/issues/339 (cc @martijn_haring at apple.com<mailto:martijn_haring at apple.com> )
     *   please review PRs: https://github.com/openid/OpenID4VCI/pulls
     *   need to assign VCI Final 1.0 non-priority issues without PRs<https://github.com/openid/OpenID4VCI/issues?q=is%3Aissue%20state%3Aopen%20milestone%3A%22Final%201.0%22%20-label%3Apriority%20-label%3Ahas-PR>


about HAIP... there are few PRs that need to be reviewed too: https://github.com/openid/oid4vc-haip/pulls


Best,
Kristina
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-digital-credentials-protocols/attachments/20250520/5cab6fcf/attachment-0001.htm>