[Openid-dcp] [notes] DCP WG + SIOP Call (APAC) 4th of September

[torsten at lodderstedt.net]

Hi,

below are the meeting minutes from the working group call on the 4th of September.

best regards,
Torsten.

Attendees:
Joseph Heenan
Philip Halsall
Kristina Yasuda
Christina Bormann
Kenichi Nakamura
Hiroyuki Sano
Klaus Roehrle
Martijn Haring
Torsten Lodderstedt

Events/General Updates

• IIW: hybrid events on 20th and 24th of Oct
• Voting has started for VCI - https://openid.net/foundation/members/polls/376 - please vote

VCI
WG members are asked to review the following PRs: PR 646, PR 643, PR 642

HAIP

• PR 229
• PR 252
• Issue 243
    • Christian: binding can be achieved independent of the client id scheme by using data from the certificate. Should be decided by the ecosystem.
    • Martijn: binding can provide some security, but one needs to be careful in terms of consequences.
    • Kenichi pointed out that the subject of the reader cert and the subject of the TLS cert can be different in mDL case.
    • Consensus to add this recommendation in a PR, Christian agreed to create the PR
• Issue 256
    • Torsten/Christian: there are long living
    • Martijn: expiration also depends on the expiration of the trust chain
    • Christian: can be coped with using long term validation procedures (oversigning)
• Issue 249
    • Kristina supports the issue
    • looking for a volunteer to create the PR
• Issue 247
    • agreement that requiring HTTPS for iss is not needed
    • Joseph to draft up change and adding text pointing out trust to the issuer shal be established through the data obtained from x5c header.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-digital-credentials-protocols/attachments/20250904/1cd4e5aa/attachment-0001.htm>