<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Helvetica Neue";
panose-1:2 0 5 3 0 0 0 2 0 4;}
@font-face
{font-family:Times;
panose-1:2 11 6 4 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-ligatures:standardcontextual;
mso-fareast-language:EN-US;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-NZ" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">Apologies about the delay in getting these out, I had mailing list issues.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">Date: 9am 31<sup>st</sup> January (NZT)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">Attendees<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">- Torsten Lodderstedt<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">- Lukasz Jaromin<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">- Paul Templeman<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">- Kristina Yasuda<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">- Christian Bormann<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">- Tim Cappalli<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">- Dima Postnikov<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">- Daniel Fett<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">- David Chadwick<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">- Brian Campbell<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">- Bjorn Hjelm<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">- Matteo Marangoni<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">- Tom Jones<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">- Tobias Looker<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">- Joseph Heenan<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">OpenID4VCI<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">PR 238<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">Kristina: I can provide some context. Joseph has been confused about the meaning of the sentence `non-exhaustive list of the values defined by this specification` which
he has suggested to modify, currently we need some more review. My point of view is that the current sentence conveys two main messages 1) the current specification defines some valid values here 2) The values are non exhaustive as in implementations are free
to define more.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">PR 235<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">Kristina: This is a normative change, we have two parameters now this PR aims to make it more obvious around what suites the issuer supports for signing a credential
vs verify a PoP in a credential request.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">Tobias: I'm supportive of this change.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">Brian: How about proof_supported -> proof_types_supported.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">Kristina: Yes I agree, someone already suggested this change on the PR.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">*Kristina to make additional changes to the PR, which moves the algorithms for proof to the key proof types section.*<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">PR 187<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">Kristina: This PR adds initial privacy considerations, however I think there needs to be additional detail so I am preparing an additional PR which will be submitted
before EOD PST.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">OpenID4VP<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">PR 84<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">Oliver: This is a very small change which clarifies something that is likely already obviously to most implementations. There are already two or three approvals.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">Torsten: Is there any urgency on this PR?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">Oliver: I need it merged before the next ISO WG10 meeting on the 7th of Feb<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">Any other topics<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">Torsten: I have one other question about an issue you filed Oliver post the last IETF meeting about lazy RP verification for OpenID4VP<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">Oliver: Issue #65, so this is related to ISO and some of the WG members complained about OpenID4VP and would like it addressed in the second addition. I've tried to
create a proposal.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">Torsten: I think this one of the big changes we should discuss.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">Oliver: The current problem is, if you have a non conformant verifier (lazy implementation) the wallet has no way to detect it is subject to a phishing attack in a
same device flow. Maybe next WG call I can speak to it more. <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">Torsten: I suggest people take a look into the issue so we can discuss it more on a follow up WG call.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">Kristina: Oliver can you make a sequence diagram<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">Oliver: Yes I can add one<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">Torsten: I would like to discuss PR 59 for OpenID4VP<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">Torsten: The problem with this current proposal is JAR doesn't allow there to be the request_uri parameter so do we consider a new parameter instead?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">Brian: Considering you are adding this new parameter request_uri_mode instead you could just communicate the uri in a new parameter like post_request_uri instead of
request_uri<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">Torsten: One benefit is that there is then a fall back approach in the event the wallet doesn't support POST mode to the request_uri<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">David: I think we should ask the editors of JAR why they disallowed this<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-ligatures:none;mso-fareast-language:EN-GB">*Lots of discussion on this topic about the trade offs of maintaining compatibility with JAR vs a new parameter/endpoint that supports POST*<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks,<o:p></o:p></p>
<div>
<div>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td width="125" valign="top" style="width:93.75pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><a href="https://mattr.global/"><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:#0FADE1;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:EN-GB;text-decoration:none"><img border="0" width="125" height="125" style="width:1.302in;height:1.302in" id="Picture_x0020_5" src="cid:image001.png@01DA55A7.1ED69650" alt="MATTR website"></span></a><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:black;mso-ligatures:none;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</td>
<td width="16" style="width:12.0pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:black;mso-ligatures:none;mso-fareast-language:EN-GB"> <o:p></o:p></span></p>
</td>
<td valign="top" style="padding:0cm 0cm 0cm 0cm">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td style="padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><b><span style="font-size:9.0pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB">Tobias Looker</span></b><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style="padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB">MATTR<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style="padding:9.0pt 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB">+64 273 780 461<br>
<span style="color:#333132;border:none windowtext 1.0pt;padding:0cm"><a href="mailto:first.last@mattr.global"><span style="color:#0563C1">tobias.looker@mattr.global</span></a></span><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style="padding:9.0pt 0cm 0cm 0cm">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td width="40" style="width:30.0pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><a href="https://mattr.global/"><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:#333132;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:EN-GB;text-decoration:none"><img border="0" width="24" height="40" style="width:.25in;height:.4166in" id="Picture_x0020_4" src="cid:image002.png@01DA55A7.1ED69650" alt="MATTR website"></span></a><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</td>
<td width="40" style="width:30.0pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><a href="https://www.linkedin.com/company/mattrglobal" target="_blank"><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:#333132;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:EN-GB;text-decoration:none"><img border="0" width="24" height="40" style="width:.25in;height:.4166in" id="Picture_x0020_3" src="cid:image003.png@01DA55A7.1ED69650" alt="MATTR on LinkedIn"></span></a><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</td>
<td width="40" style="width:30.0pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><a href="https://twitter.com/mattrglobal" target="_blank"><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:#333132;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:EN-GB;text-decoration:none"><img border="0" width="24" height="40" style="width:.25in;height:.4166in" id="Picture_x0020_2" src="cid:image004.png@01DA55A7.1ED69650" alt="MATTR on Twitter"></span></a><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</td>
<td width="40" style="width:30.0pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><a href="https://github.com/mattrglobal" target="_blank"><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:#333132;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:EN-GB;text-decoration:none"><img border="0" width="24" height="40" style="width:.25in;height:.4166in" id="Picture_x0020_1" src="cid:image005.png@01DA55A7.1ED69650" alt="MATTR on Github"></span></a><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span style="font-size:13.5pt;font-family:Times;color:black;mso-ligatures:none;mso-fareast-language:EN-GB"><br>
</span><span style="font-size:6.0pt;font-family:"Helvetica Neue";color:#767676;mso-ligatures:none;mso-fareast-language:EN-GB">This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it – please
contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions
Act 2002.</span><o:p></o:p></p>
</div>
</div>
</div>
</body>
</html>