<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Aptos;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Helvetica Neue";
panose-1:2 0 5 3 0 0 0 2 0 4;}
@font-face
{font-family:Times;
panose-1:2 11 6 4 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Aptos",sans-serif;
mso-ligatures:standardcontextual;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#467886;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:11.0pt;
font-family:"Aptos",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-NZ" link="#467886" vlink="#96607D" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><b><span style="mso-fareast-language:EN-GB">Attendees<o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></b></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Joseph Heenan<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Daniel Fett<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Torsten Lodderstedt<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Oliver Terbu<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Christian Bormann<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Tim Cappalli<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Sudesha Shetty<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Mike Jones<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Brian Campbell<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Victor<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Gabe<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Ryan Galluzo<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">David Waite<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="mso-fareast-language:EN-GB">Events External Orgs<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="mso-fareast-language:EN-GB">Potential LSP Interop Event Updates<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Oliver: Matthais the CTO of this, asked me to come up with an update to the VCI metadata for track 1,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">**Oliver walked through the following document as a proposal for the POTENTIAL LSP interop event
<a href="https://hackmd.io/COCgf05rTfOsdnzfFId9zg">https://hackmd.io/COCgf05rTfOsdnzfFId9zg</a>**<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Kristina: It looks like one question is how to request just the MSO vs the actual signed claim values<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Torsten: My question is not what problem they are solving, but how they are solving it using OpenID4VCI<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Oliver: I'll finish walking through the proposal and perhaps it will be clearer<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Oliver: Suggestion is to have two profiles "lite" and "full", "lite" is much more like what we currently have in OpenID4VCI and "full" allows for more of the<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">specific partial returning of just the MSO, a more experimental feature the ISO WG want to test.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Kristina: I'm not opposed to testing this behaviour but I think a new credential format isn't the right approach<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Tobias: I think I agree, we should explore whether an additional parameter in the credential request is used to control returning the MSO and or the Issuer Signed.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Sebastian: I just wanted to say clarifying ownership around where the credential request and response is defined for a concrete format is important currently its defined in ISO and in OpenID, it
would be good to clarify<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">**Lots more discussion on the approach please review the recording**<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="mso-fareast-language:EN-GB">Open PRs and Issues<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="mso-fareast-language:EN-GB">Transaction Authorisation<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Mike: I've been talking to some people at Visa about this issue, which they are enthusiastic about, however they have some questions about privacy<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Mike: They pointed out the example, lets say the transaction involves a $1500 payment authorisation to an adult film site, as you can appreciate this becomes quite sensitive information.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Tobias: Who are we worried about might see this request here?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Mike: The modality of different presentation protocols could mean someone might intercept this request such as in cross device flows.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Torsten: **Walked through a concrete example for payment_confirmation in this document
</span><a href="https://docs.google.com/document/d/1E_UlB3fh9zbWiPrzFThEnt69hYN60CWk/edit**"><span style="mso-fareast-language:EN-GB">https://docs.google.com/document/d/1E_UlB3fh9zbWiPrzFThEnt69hYN60CWk/edit</span></a> **<span style="mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Torsten: As a side we also now have the ability to encrypt the request thanks to the merging of PR 59<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Mike: Finally in the document, Kristina, your speaking of a spec that uses OID, and base64 encoding rather than base64url encoding, what is that spec, it does things different<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">to how we usually do things<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Kristina: It is aligned with CSS (cloud signature consortium) which is an SDO responsible for certain standards in the EU<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Torsten: **Gave context about who CSS is and their role in eidas**<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Mike: Thanks with that my questions are satisfied, thanks for the time<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="mso-fareast-language:EN-GB">Mandatory to implement features (Issue 157)<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Kristina: **Re-intro'd the issue and gave updated context following IIW**<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Kristina: Please re-review issue 157 to ensure you agree with the requirements<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Kristina: For the issues we didn't feel there was consensus on we have opened 5 new issues 158, 159 160, 161, 162, please review these<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Kristina: We only have 7 mins left but it might be worth using the remaining time to discuss any questions with regard to the new issues<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Mike: I've gone through and commented on each issue, on the back of that what I think might be worthwhile is updating some of the descriptions<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">of the issues as much of the confusion was around understanding what the issue actually is.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="mso-fareast-language:EN-GB">Issue 162<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Joseph: I think enough implementers have said they want this feature<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Tobias: I agree, but I want to explore appropriate implementation guidance to ensure RP are aware of the tradeoffs<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Torsten: We also need to be clear that requesting multiple credentials is a useful feature and that it does offer a superior user experience.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal">Thanks,<o:p></o:p></p>
<div>
<div>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td width="125" valign="top" style="width:93.75pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><a href="https://mattr.global/"><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:#0FADE1;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:EN-GB;text-decoration:none"><img border="0" width="125" height="125" style="width:1.302in;height:1.302in" id="Picture_x0020_5" src="cid:image001.png@01DA9D46.282D7430" alt="MATTR website"></span></a><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:black;mso-ligatures:none;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</td>
<td width="16" style="width:12.0pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:black;mso-ligatures:none;mso-fareast-language:EN-GB"> <o:p></o:p></span></p>
</td>
<td valign="top" style="padding:0cm 0cm 0cm 0cm">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td style="padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><b><span style="font-size:9.0pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB">Tobias Looker</span></b><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style="padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB">MATTR<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style="padding:9.0pt 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB">+64 273 780 461<br>
<span style="color:#333132;border:none windowtext 1.0pt;padding:0cm"><a href="mailto:first.last@mattr.global"><span style="color:#0563C1">tobias.looker@mattr.global</span></a></span><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style="padding:9.0pt 0cm 0cm 0cm">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td width="40" style="width:30.0pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><a href="https://mattr.global/"><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:#333132;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:EN-GB;text-decoration:none"><img border="0" width="24" height="40" style="width:.25in;height:.4166in" id="Picture_x0020_4" src="cid:image002.png@01DA9D46.282D7430" alt="MATTR website"></span></a><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</td>
<td width="40" style="width:30.0pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><a href="https://www.linkedin.com/company/mattrglobal" target="_blank"><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:#333132;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:EN-GB;text-decoration:none"><img border="0" width="24" height="40" style="width:.25in;height:.4166in" id="Picture_x0020_3" src="cid:image003.png@01DA9D46.282D7430" alt="MATTR on LinkedIn"></span></a><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</td>
<td width="40" style="width:30.0pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><a href="https://twitter.com/mattrglobal" target="_blank"><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:#333132;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:EN-GB;text-decoration:none"><img border="0" width="24" height="40" style="width:.25in;height:.4166in" id="Picture_x0020_2" src="cid:image004.png@01DA9D46.282D7430" alt="MATTR on Twitter"></span></a><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</td>
<td width="40" style="width:30.0pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><a href="https://github.com/mattrglobal" target="_blank"><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:#333132;border:none windowtext 1.0pt;padding:0cm;mso-fareast-language:EN-GB;text-decoration:none"><img border="0" width="24" height="40" style="width:.25in;height:.4166in" id="Picture_x0020_1" src="cid:image005.png@01DA9D46.282D7430" alt="MATTR on Github"></span></a><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span style="font-size:13.5pt;font-family:Times;color:black;mso-ligatures:none;mso-fareast-language:EN-GB"><br>
</span><span style="font-size:6.0pt;font-family:"Helvetica Neue";color:#767676;mso-ligatures:none;mso-fareast-language:EN-GB">This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it – please
contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions
Act 2002.</span><o:p></o:p></p>
</div>
</div>
</div>
</body>
</html>