<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Helvetica Neue";
panose-1:2 0 5 3 0 0 0 2 0 4;}
@font-face
{font-family:Times;
panose-1:2 11 6 4 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-ligatures:standardcontextual;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-NZ" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Call notes for DCP WG 21st Feb 9am (NZT)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Attendees<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Daniel Fett<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Tobias Looker<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Joseph Heenan<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Paul Bastian<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Christian Bormann<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">John Bradley<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Kristina Yasuda<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Michael Jones<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Chris Cox<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Sudesha Shetty<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Tom Jones<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Gabe<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Brian Campbell<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Dima Postnikov<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Kristina: Agenda Bashing, highest priority discussion is probably PR 266 in OpenID4VCI, does anyone else have any items they would like to discuss?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="mso-fareast-language:EN-GB">OpenID4VCI<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><a href="https://github.com/openid/OpenID4VCI/pull/276"><span style="mso-fareast-language:EN-GB">https://github.com/openid/OpenID4VCI/pull/276</span></a><span style="mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Daniel: *Introduced the rationale for the PR and what it aims to fix*, high level as the PR describes it fixes issues 272, 271 and 266. Also see here for a related reference
</span><a href="https://github.com/vcstuff/sd-jwt-vc-types/pull/5"><span style="mso-fareast-language:EN-GB">https://github.com/vcstuff/sd-jwt-vc-types/pull/5</span></a><span style="mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Brian: I didn't actually read this PR yet, but from what I saw in the other PR its a great improvement<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Tobias: Same, haven't reviewed the OpenID4VCI PR yet, I think this is a big improvement.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Kristina: Daniel I think you will move this from draft to ready to review PR?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Daniel: Yes thats correct, will do<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="mso-fareast-language:EN-GB">Issue Triage<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Kristina: Joseph and I have triaged the current issues and added suitable GH labels, see the "priority" label.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Tobias: I still have to open a new issue on the topic discussed last week, will do that before next WG call.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Kristina: Issue 202 looks to be ready for PR, who would be able to assist with this one?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Paul: I can try file a PR for it<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Joseph: I think #91 should be labelled for priority too<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Kristina: **Briefly re-described issue 172**, consensus is to add general guidance on naming guidance for new formats, would you mind filing a PR Oliver<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Oliver: Yes if its not time critical<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="mso-fareast-language:EN-GB">OpenID4VP<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Kristina: PR 99 looking for more reviews and approvals on please<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Kristina: Are there any other PR's we should look at Oliver?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Oliver: 108 looks ready<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Kristina: Looks like there is a pending suggestion that has just come in?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Oliver: I'd rather not fix in this PR it needs to be fixed in a separate PR.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Joseph: Agreed there are other places to fix it too<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Kristina: Will merge after this call<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Paul: One question on the last new sentence in this PR, is the response endpoint terminology consistently used<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Kristina: Yes its intended to be, could be clearer though I will follow it up.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Kristina: Is there any progress on PR 59?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Oliver: I made a proposal to decouple the feature negotiation from the rest of the proposal.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Oliver: The problem is with the verifier signing the request is that the wallet may not be able to verify the signature.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Oliver: There is a concern that the capability negotiation phase to resolve the request uri could profile and fingerprint the user<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Tobias: I agree this is a concern<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">John: Web browsers are also concerned about this possible source of fingerprint, I dont think it is something we can ignore<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Daniel: +1 to everything John said<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Kristina: If I understand correctly the issue isn't really about whether the initial request is signed it more what the wallet sends back to the verifier w.r.t capability negotiation?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">John: I just want to confirm sending the information before there is user interaction is the core issue as that is where fingerprinting is powerful<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">**Lots of discussion on this topic, difficult to capture all points, please review recording :)**<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">John: **Spoke more generally about the negotiation model and different tradeoffs**<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Kristina: Not confident, but I will try and summarise what I heard, there is concern that the capability negotiation of the wallet sending its capabilities to verifier is a source of fingerprinting.
The second point is that the verifier signing the initial request might not solve the problem that was first identified.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">John: I think Brian's point here about our relationship to OAuth2 here is a good one, perhaps we need to backup a step and consider that more?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Kristina: Brian would you mind providing a comment here on the point you raised?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">DCP WG In person meeting and OpenID Workshop<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Kristina: Just wanted to remind folk to register for the DCP in person session that is in April around IIW<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Mike: There is also the OpenID Workshop at the start of the same week<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks,<o:p></o:p></p>
<div>
<div>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td width="125" valign="top" style="width:93.75pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><a href="https://mattr.global/"><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:#0FADE1;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:EN-GB;text-decoration:none"><img border="0" width="125" height="125" style="width:1.302in;height:1.302in" id="Picture_x0020_5" src="cid:image001.png@01DA64B8.1643E7C0" alt="MATTR website"></span></a><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:black;mso-ligatures:none;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</td>
<td width="16" style="width:12.0pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:black;mso-ligatures:none;mso-fareast-language:EN-GB"> <o:p></o:p></span></p>
</td>
<td valign="top" style="padding:0cm 0cm 0cm 0cm">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td style="padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><b><span style="font-size:9.0pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB">Tobias Looker</span></b><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style="padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB">MATTR<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style="padding:9.0pt 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB">+64 273 780 461<br>
<span style="color:#333132;border:none windowtext 1.0pt;padding:0cm"><a href="mailto:first.last@mattr.global"><span style="color:#0563C1">tobias.looker@mattr.global</span></a></span><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style="padding:9.0pt 0cm 0cm 0cm">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td width="40" style="width:30.0pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><a href="https://mattr.global/"><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:#333132;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:EN-GB;text-decoration:none"><img border="0" width="24" height="40" style="width:.25in;height:.4166in" id="Picture_x0020_4" src="cid:image002.png@01DA64B8.1643E7C0" alt="MATTR website"></span></a><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</td>
<td width="40" style="width:30.0pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><a href="https://www.linkedin.com/company/mattrglobal" target="_blank"><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:#333132;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:EN-GB;text-decoration:none"><img border="0" width="24" height="40" style="width:.25in;height:.4166in" id="Picture_x0020_3" src="cid:image003.png@01DA64B8.1643E7C0" alt="MATTR on LinkedIn"></span></a><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</td>
<td width="40" style="width:30.0pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><a href="https://twitter.com/mattrglobal" target="_blank"><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:#333132;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:EN-GB;text-decoration:none"><img border="0" width="24" height="40" style="width:.25in;height:.4166in" id="Picture_x0020_2" src="cid:image004.png@01DA64B8.1643E7C0" alt="MATTR on Twitter"></span></a><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</td>
<td width="40" style="width:30.0pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><a href="https://github.com/mattrglobal" target="_blank"><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:#333132;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:EN-GB;text-decoration:none"><img border="0" width="24" height="40" style="width:.25in;height:.4166in" id="Picture_x0020_1" src="cid:image005.png@01DA64B8.1643E7C0" alt="MATTR on Github"></span></a><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span style="font-size:13.5pt;font-family:Times;color:black;mso-ligatures:none;mso-fareast-language:EN-GB"><br>
</span><span style="font-size:6.0pt;font-family:"Helvetica Neue";color:#767676;mso-ligatures:none;mso-fareast-language:EN-GB">This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it – please
contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions
Act 2002.</span><o:p></o:p></p>
</div>
</div>
</div>
</body>
</html>