[Openid-dcp] Security and Trust

[Frederik Krogsdal Jacobsen]

Hi Murat,

You may also want to look at the formal security analysis referenced in the
VCI spec itself (sec. 13.1).
Here is the link for convenience: https://dx.doi.org/10.18419/opus-13772

Note that the formal security analysis was done on an older draft of the
specification.

Cheers,
Frederik

On Wed, 3 Jun 2026 at 14:29, Thomas Diesler via
Openid-specs-digital-credentials-protocols <
openid-specs-digital-credentials-protocols at lists.openid.net> wrote:

> FWIW, there is also the HAIP-1.0 Profile that addresses additional
> security concerns.
>
> https://openid.net/specs/openid4vc-high-assurance-interoperability-profile-1_0-final.html
>
> --thomas
> ------------------------------
> *From:* Openid-specs-digital-credentials-protocols <
> openid-specs-digital-credentials-protocols-bounces at lists.openid.net> on
> behalf of sekmenmu20--- via Openid-specs-digital-credentials-protocols <
> openid-specs-digital-credentials-protocols at lists.openid.net>
> *Sent:* 03 June 2026 13:50
> *To:* openid-specs-digital-credentials-protocols at lists.openid.net <
> openid-specs-digital-credentials-protocols at lists.openid.net>
> *Cc:* sekmenmu20 at itu.edu.tr <sekmenmu20 at itu.edu.tr>
> *Subject:* [EXTERNAL] [Openid-dcp] Security and Trust
>
> Dear Community, I would like to ask whether “Security and Trust in OpenID
> for Verifiable Credentials Ecosystem” is the main source for security
> analysis of OpenID4VCI or is there any other supplementary spec that I may
> have missed?
>
> Dear Community,
>
>
>
> I would like to ask whether “Security and Trust in OpenID for Verifiable
> Credentials Ecosystem” is the main source for security analysis of
> OpenID4VCI or is there any other supplementary spec that I may have missed?
>
>
>
> Thank you in advance,
>
> Murat
>
>
>
>
>
>
> --
> Openid-specs-digital-credentials-protocols mailing list
> Openid-specs-digital-credentials-protocols at lists.openid.net
>
> https://lists.openid.net/mailman/listinfo/openid-specs-digital-credentials-protocols
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-digital-credentials-protocols/attachments/20260603/0d29b891/attachment-0001.htm>