[Openid-dcp] Minutes from 10-Jun-26 DCP WG call

[Frederik Krogsdal Jacobsen]

   - Participants: Dima Postnikov, Joseph Heenan, Frederik Krogsdal
   Jacobsen, Gareth Oliver, Micha Kraus, Martijn Haring, Klaus Roehrle
   - Events: Frederik will ask OIDF staff about how many people signed up
   for pre-DICE hybrid meeting. If very few, we can cancel it.
   - Test requirements document for the EU: Please respond to the request
   for review if you have time.
   - Joint work with ISO
      - A new WG in the OIDF is being set up now.
      - See email thread:
      https://lists.openid.net/pipermail/openid-specs-digital-credentials-protocols/Week-of-Mon-20260608/001272.html
      - First formal meeting will be June 29th, 13:00 - 16:00 UTC.
      - If you don’t have an “All WGs” contribution agreement, you will
      need to sign a new one to participate in the new WG.
      - Hope to establish consensus on chairs of the new WG in the first
      meeting.
      - The charter will be available within a few days. There should be no
      material changes compared to the latest discussion.
      - Hope to establish consensus on best possible time slots in the
      first meeting. But it might be better to send out a poll already now.
   - Conformance test updates
      - Some implementations of OpenID4VP have not been fully updated to
      the final version of the spec.
      - Joseph has received good feedback and the verifier tests are now
      easier to run.
      - The test suite will get a new and improved user interface soon, so
      don’t be surprised if things move around a bit.
      - Certification is only being launched for the HAIP version of the
      tests for now. But a lot of people are running the non-HAIP
version of the
      tests.
      - 3 issuer implementations have been tested. There’s only one mDL
      implementation, so if anyone has one, it would be good to run
the tests on
      it.
      - 3 wallet issuer implementations have been tested, but all of them
      were SD-JWT. If anyone has an mDL implementation, it would be good to run
      the tests on it.
      - 3 verifier implementations have been tested.
      - 3 wallet presentation implementations have been tested. There’s
      only one mDL implementation, so if anyone has one, it would be
good to run
      the tests on it.
      - Nobody has tested a JSON serialization implementation for
      multi-signed requests. A problem is that wallet matchers don’t
support it.
      Gareth will follow up internally.
   - Server to server
      - Gareth is about halfway through writing down the draft document.
      - There are still a few design decisions to discuss, but a first
      draft should be ready by the end of this week.
   - OpenID4VP
      - Many PRs still need reviews.
      - Issues
         - https://github.com/openid/OpenID4VP/issues/723
            - Reviews needed. Gareth and Martijn will follow up.
         - https://github.com/openid/OpenID4VP/issues/741
            - Is the reader REQUIRED to reject non-matching credential
            types? And if not, we should clarify that it is up to the
reader what to do.
            - Martijn: The definition of inheritance in SD-JWT VC might not
            be enough to fully define what is happening. E.g. is a
German PID also a
            PID? It is not just about inheriting metadata, but also
the actual type.
            - Is the intention that actual types are also inherited? This
            has security implications. We should get a clear answer on
the intention.
            - Example: If you return more claims than requested, MUST the
            verifier reject that?
            - Gareth: This needs to be solved in the SD-JWT VC spec.
            Inheritance logic is defined there.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-digital-credentials-protocols/attachments/20260610/88325c52/attachment-0001.htm>