<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Aptos;
panose-1:2 11 0 4 2 2 2 2 2 4;}
@font-face
{font-family:"Helvetica Neue";
panose-1:2 0 5 3 0 0 0 2 0 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:10.0pt;
font-family:"Aptos",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Aptos",sans-serif;
color:windowtext;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:2145418784;
mso-list-template-ids:-933430456;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style>
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word;line-break:after-white-space">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;color:black;background:white">Hi folks,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black;background:white"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black;background:white">Below are the notes for
<span class="apple-converted-space"> </span>DCP call on 2024-08-20<br>
Please feel free to correct if I have made any mistake in the notes.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black;background:white"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">## Attendees (20)<br>
<br>
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Rajvardhan Deshmukh<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Torsten Lodderstedt<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Joseph Heenan<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Kristina Yasuda<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Ketan Mehta<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Michael Jones<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Stece Venema<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Ryan Galluzzo, NIST ACD<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Martijn Haring<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Paul Bastian<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Jan Vereecken<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Sebastien Bahloul (IDEMIA/AFNOR)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Daniel Fett<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Oliver Terbu<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Tobias Looker (MATTR)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">George Fletcher<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">nemanja.patrnogic<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Hicham Loz (Apple)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Brian Campbell<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Bjorn Hjelm<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><br>
## Notes<br>
<br>
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Joseph: OIDF workshop in October, register for in-person or virtual. Email sent out.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><a href="https://github.com/openid/OpenID4VP/issues/124">https://github.com/openid/OpenID4VP/issues/124</a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Oliver: client_id_schema is<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">invasive to existing protocols and security concerns (mentioned in issue)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Daniel's PR solves security issue but not the others.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Remove clientid_schema and move components into protocol<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Daniel: Auto detect client id schema? Auth client ID against key/pub key.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Verifier sends req and cert in the req obj, rules validate req<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Current when redirect authz req not signed.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Main reason for client_id_schema is client metadata resolution<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Daniel and Oliver: Make sure all methods did and x5c are in the same security level<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Oliver: the proposal will simplify and combine different client id schemes<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Torsten: How does a wallet decide auth of openid federation?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Distinguish logic, pre-registered client and other flows.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Describe Control logic that kicks in for each request.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">client-id schema used to define logic for how clients authenticate.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Text describing the logic is needed.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Kristina:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Concern: <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">1. Using implicit inputs to determine logic makes it fragile. E.g. header + client_id, if client id https 2 ways …<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2. Folks will have to understand this, wallet will have to implement more complicated logic.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Tobias: Oliver will provide logic, how to interpret client id and which methods will be used depending on the input parameters. This will be created as an issue in the repository.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Tobias: Real world usecase different mechanisms same id where wallet support web domain also sign x509, support graceful fallback.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Joseph and Oliver agree that they will present next week (Tuesday).<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><a href="https://github.com/openid/OpenID4VP/issues/227">https://github.com/openid/OpenID4VP/issues/227</a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Mike: Let's explicitly state the principles to enable non-breaking extensibility<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Joseph: already implicit, so its normitive and change seems reasonable<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">assigned PR's<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><a href="https://github.com/openid/OpenID4VP/issues/228">https://github.com/openid/OpenID4VP/issues/228</a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><a href="https://github.com/openid/OpenID4VP/issues/221">https://github.com/openid/OpenID4VP/issues/221</a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><a href="https://github.com/openid/OpenID4VP/issues/216">https://github.com/openid/OpenID4VP/issues/216</a> (Martijn pointed out the confusing about language about using JARM, will be clarified in the PR)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Brian and Torsten: JARM encrypt response (redirect methods and browser api), claim responses then don't need it.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Best,<br>
Rajvardhan<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<div id="mail-editor-reference-message-container">
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:12.0pt;color:black">From:
</span></b><span style="font-size:12.0pt;color:black">Openid-specs-digital-credentials-protocols <openid-specs-digital-credentials-protocols-bounces@lists.openid.net> on behalf of Joseph Heenan via Openid-specs-digital-credentials-protocols <openid-specs-digital-credentials-protocols@lists.openid.net><br>
<b>Date: </b>Tuesday, August 20, 2024 at 11:20</span><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:black"> </span><span style="font-size:12.0pt;color:black">AM<br>
<b>To: </b>Digital Credentials Protocols List <openid-specs-digital-credentials-protocols@lists.openid.net><br>
<b>Cc: </b>Joseph Heenan <joseph@authlete.com><br>
<b>Subject: </b>[Openid-specs-digital-credentials-protocols] [agenda] APAC-friendly DCP WG + SIOP call (PST midday)<o:p></o:p></span></p>
</div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt">Hi All,<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt">Below is the suggested agenda for today's DCP WG + SIOP call at 12:00 midday PT (just over 40 minutes time), <a href="https://zoom.us/j/94085567252?pwd=cHNFMExFalhlM2MrOFhoN3J6eDRuZz09">https://zoom.us/j/94085567252?pwd=cHNFMExFalhlM2MrOFhoN3J6eDRuZz09</a><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
</div>
<div>
<ol style="margin-top:0in" start="1" type="1">
<li class="MsoNormal" style="mso-list:l0 level1 lfo1;font-variant-caps:normal;font-stretch:normal;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal">
<span style="font-family:"Helvetica Neue"">IPR reminder/ Note-taking<o:p></o:p></span></li><li class="MsoNormal" style="mso-list:l0 level1 lfo1;font-variant-caps:normal;font-stretch:normal;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal">
<span style="font-family:"Helvetica Neue"">Introductions/re-introductions<o:p></o:p></span></li><li class="MsoNormal" style="mso-list:l0 level1 lfo1;font-variant-caps:normal;font-stretch:normal;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal">
<span style="font-family:"Helvetica Neue"">Agenda bashing/adoption<o:p></o:p></span></li><li class="MsoNormal" style="mso-list:l0 level1 lfo1;font-variant-caps:normal;font-stretch:normal;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal">
<span style="font-family:"Helvetica Neue"">Events/External orgs<o:p></o:p></span></li><li class="MsoNormal" style="mso-list:l0 level1 lfo1;font-variant-caps:normal;font-stretch:normal;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal">
<span style="font-family:"Helvetica Neue"">Oliver/Tobias proposal for client_id_scheme security ( <a href="https://github.com/openid/OpenID4VP/issues/124">https://github.com/openid/OpenID4VP/issues/124</a> )<o:p></o:p></span></li><li class="MsoNormal" style="mso-list:l0 level1 lfo1;font-variant-caps:normal;font-stretch:normal;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal">
<span style="font-family:"Helvetica Neue"">Issues ready for PRs - who can help please?<o:p></o:p></span></li><li class="MsoNormal" style="mso-list:l0 level1 lfo1;font-variant-caps:normal;font-stretch:normal;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal">
<span style="font-family:"Helvetica Neue"">PRs needing reviews/discussions<o:p></o:p></span></li><li class="MsoNormal" style="mso-list:l0 level1 lfo1;font-stretch:normal;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal">
<span style="font-family:"Helvetica Neue"">Other Open PRs/Issues<o:p></o:p></span></li></ol>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt">Thanks<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt">Joseph<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>