<html><head><meta http-equiv="content-type" content="text/html; charset=us-ascii"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">Hi Orie<div><br></div><div>Could you share an example of a use case where your assumptions hold true please?</div><div><br></div><div>Thanks</div><div><br></div><div>Joseph</div><div><br id="lineBreakAtBeginningOfMessage"><div><br><blockquote type="cite"><div>On 15 Feb 2024, at 22:03, Orie Steele via Openid-specs-digital-credentials-protocols <openid-specs-digital-credentials-protocols@lists.openid.net> wrote:</div><br class="Apple-interchange-newline"><div><div dir="auto"><div><div class="gmail_quote"><div dir="ltr" class="gmail_attr"><br></div><div dir="ltr"><div>( I signed the contributor agreement in docusign ).<br><br></div><div>My ideal flow:<br><br>GET relying-party.example/nonce<br>POST relying-party.example/presentations<br><br>If the RP wants to demand extra state commitments from the wallet, that's fine, but if the wallet just wants a nonce to make a presentation, the wallet should be able to just get a nonce.<br><br>Once the wallet has used the nonce, the wallet wants to send the presentation to the RP.<br><br>If the RP wants to demand extra state commitments from the wallet, that's fine, but if the wallet just wants to send a presentation, the wallet should be able to just send a presentation.<br><br>In other words, all the parameters that are "not a nonce" and "not a presentation" are getting in the way of a simple spec.<br><br>We have a proposal for a simple endpoint for getting nonces:<br><br><a href="https://datatracker.ietf.org/doc/draft-demarco-oauth-nonce-endpoint/" target="_blank" rel="noreferrer">https://datatracker.ietf.org/doc/draft-demarco-oauth-nonce-endpoint/</a><br><br>I want a simple endpoint for sending presentations.<br><br>Assume an api gateway will filter out anything it does not recognize as being encrypted to an internal verifier, or as a well formed signed presentation.<br>Assume the nonce is negotiated out of band.<br>Assume credential types are negotiated out of band.<br>Assume credential claims are negotiated out of band.<br>Assume the presentation endpoint is negotiated out of band.<br><br>How does a wallet submit a presentation?<br><br>Regards,<br><br>OS<br><br></div><span class="gmail_signature_prefix">-- </span><br><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><span><div style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><br></div><div style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt; padding: 10pt 0pt;"><span style="font-size:10pt;font-family:Arial;color:rgb(32,18,77);background-color:transparent;font-weight:700;vertical-align:baseline;white-space:pre-wrap">ORIE STEELE</span><span style="font-size:10pt;font-family:Arial;color:rgb(32,18,77);background-color:transparent;font-weight:700;vertical-align:baseline;white-space:pre-wrap"><br></span><span style="font-size:10pt;font-family:Arial;color:rgb(32,18,77);background-color:transparent;vertical-align:baseline;white-space:pre-wrap">Chief Technology Officer</span><span style="font-size:10pt;font-family:Arial;color:rgb(32,18,77);background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><br></span><span style="font-size:8pt;font-family:Arial;color:rgb(32,18,77);background-color:transparent;vertical-align:baseline;white-space:pre-wrap">www.transmute.industries</span></div><div style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt; padding: 0pt 0pt 10pt;"><a href="https://transmute.industries/" target="_blank" rel="noreferrer"><img width="96" height="22" src="https://ci3.googleusercontent.com/mail-sig/AIorK4xqtkj5psM1dDeDes_mjSsF3ylbEa5EMEQmnz3602cucAIhjLaHod-eVJq0E28BwrivrNSBMBc"></a><br></div></span></div></div></div></div></div></div></div>
</div></div></div>
-- <br>Openid-specs-digital-credentials-protocols mailing list<br>Openid-specs-digital-credentials-protocols@lists.openid.net<br>https://lists.openid.net/mailman/listinfo/openid-specs-digital-credentials-protocols<br></div></blockquote></div><br></div></body></html>