<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Aptos;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:12.0pt;
font-family:"Aptos",sans-serif;}
span.E-MailFormatvorlage20
{mso-style-type:personal-compose;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:940991324;
mso-list-template-ids:827725998;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple style='word-wrap:break-word'><div class=WordSection1><div><div><div><div><div><div><div><div><div><div><div><p class=MsoNormal>Hi all,<o:p></o:p></p><p class=MsoNormal>Below are the notes from today’s WG call.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Regards, <o:p></o:p></p><p class=MsoNormal>Christian<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>----<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Date: 25th June 2024<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Attendees:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Christian Bormann<o:p></o:p></p><p class=MsoNormal>Joseph Heenan<o:p></o:p></p><p class=MsoNormal>Andres Olave<o:p></o:p></p><p class=MsoNormal>Brian Campbell<o:p></o:p></p><p class=MsoNormal>David Waite<o:p></o:p></p><p class=MsoNormal>Gareth Oliver<o:p></o:p></p><p class=MsoNormal>Giuseppe De Marco<o:p></o:p></p><p class=MsoNormal>Jan Vereecken<o:p></o:p></p><p class=MsoNormal>Lukasz Jaromin<o:p></o:p></p><p class=MsoNormal>Nemanja Patrnogic<o:p></o:p></p><p class=MsoNormal>Rajvardhan Deshmukh<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>----<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Upcoming events: IETF 120 Vancouver with an upcoming deadline of 8th of July for updated drafts!<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>No new introductions to the working group call<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>----<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>OID4VP profile for the W3C Digital Credentials API - https://github.com/openid/OpenID4VP/pull/155:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Joseph mentions that not too many new discussions seemed to have happened since the last time this was discussed, but a few more reviews were added. Brian mentions that a request object within a parameter called request for parameter names will be quite confusing, but looks like something we will have to live with. There was some discussion about a clearer formulation to distinguish between w3c credential api and openid4vp parts. Some discussion about the returned data type from the w3c digital credentials api and that currently the consensus seems to be an object instead of any as it is currently in the draft. Joseph will raise an issue in the openid4vp repository to follow the change and adjust the examples accordingly.<o:p></o:p></p><p class=MsoNormal>There is some discussion about unsigned requests and where it could be used, especially if an unsigned request would be doable with things like openid federation. Consensus was to not stress too much about these topics for this PR.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>make credential_identifiers mandatory for authorization_details flow - https://github.com/openid/OpenID4VCI/pull/346:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Joseph introduces that this came out of some discussions at IIW to simplify the spec. Missing point is a discussion about credential_identifiers should be mandatory for every case or only for RAR. Paul is not present in the call and this PR is postponed.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Is c_nonce required in proof or not? - https://github.com/openid/OpenID4VCI/issues/331<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Joseph mentions that the issue got derailed a bit but should come back to the core issue whether c_nonce is mandatory. Some discussion about the current state of the issue and past discussions. Nemanja adds that security wise it would be good to have the nonce if you have subsequent requests. Nemanja adds that there should be some clarification about subsequent requests - which should require a nonce. Nemanja and Brian mention that in section 7.2 there is a section that reads as proofs always having to have a c_nonce value to be acceptable. Some more discussion about section 7.3.2 which seems to share similar issues. Nemanja adds that they already an issue when integrating with a wallet provider and we need to make sure everyone is implementing/understanding the same thing.<o:p></o:p></p><p class=MsoNormal>Joseph asks if we should clarify that part in the spec and make c_nonce completely optional, or to mandate c_nonce and if the client doesn't have a c_nonce to get an error that contains a c_nonce. Joseph will comment on the issue capturing the discussion in the call. Lukasz may add a comment in the issue with a third option.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p></div></div></div></div></div></div></div></div></div></div></div></div></body></html>