<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><meta charset="UTF-8"><meta http-equiv="content-type" content="text/html; charset=utf-8"><div style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div class="WordSection1" style="page: WordSection1; text-align: start; text-indent: 0px;"><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;"><span style="font-size: 12pt;"> </span></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;">Attendees:<o:p></o:p></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;"><br></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;">Joseph Heenan</div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;">Kristina Yasuda</div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;">Paul Bastian</div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;">Torsten Lodderstedt</div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;">Brian Campbell</div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;">Christian Bormann</div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;">Daniel Fett</div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;">Michael Jones</div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;">Nemanja Patrnogic</div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;">Tom Johnson</div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;">John Bradley</div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;">Lukasz Jaromin</div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;">Tom Jones</div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;"><br></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;"><br></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;"><o:p> </o:p></div><div style="margin: 0cm;"><br></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;"><u>Introductions</u></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;"><br></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;">Tom Johnson: With IC Consult, based in Dallas Texas, works on various identity and decentralised things.</div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;"><br></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;"><span style="font-size: 12pt;"><br></span></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;"><span style="font-size: 12pt;"><u>Events </u></span></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;"><span style="font-size: 12pt;"><br></span></div><div style="margin: 0cm;"><font color="#000000" face="Aptos, sans-serif" size="3">Pre-IIW workshop: Won’t be at Cisco now due to a building closure - new location to be confirmed but should still be in the general area around the computer history museum.</font></div><div style="margin: 0cm;"><br></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;"><br></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;"><o:p><br></o:p></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;"><o:p><u>Client id scheme security</u></o:p></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;"><br></div><a href="https://github.com/openid/OpenID4VP/pull/263">https://github.com/openid/OpenID4VP/pull/263</a><div style="margin: 0cm;"><o:p style="caret-color: rgb(0, 0, 0);"><font color="#000000" face="Aptos, sans-serif" size="3"></font></o:p></div><p class="MsoNormal" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 12pt; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; -webkit-text-stroke-width: 0px; margin: 0cm;"><span style="font-size: 12pt;"> </span></p><div style="margin: 0cm;"><font color="#000000" face="Aptos, sans-serif" size="3">Brian has approved despite concerns (as detailed on PR), no further concerns raised by anyone else including as a result of Joseph’s email to the WG mailing list a week ago, Kristina messaged Oliver to double check but otherwise plans to merge very soon.</font></div><div style="margin: 0cm;"><font color="#000000" face="Aptos, sans-serif" size="3"><span style="caret-color: rgb(0, 0, 0);"><br></span></font></div><div style="margin: 0cm;"><br></div><div style="margin: 0cm;"><font color="#000000" face="Aptos, sans-serif" size="3"><span style="caret-color: rgb(0, 0, 0);"><u>Key attestation</u></span></font></div><div style="margin: 0cm;"><font color="#000000" face="Aptos, sans-serif" size="3"><span style="caret-color: rgb(0, 0, 0);"><br></span></font></div><div style="margin: 0cm;"><a href="https://github.com/openid/OpenID4VP/pull/258">https://github.com/openid/OpenID4VP/pull/258</a><font color="#000000" face="Aptos, sans-serif" size="3"><span style="caret-color: rgb(0, 0, 0);"><br></span></font></div><div style="margin: 0cm;"><font color="#000000" face="Aptos, sans-serif" size="3"><span style="caret-color: rgb(0, 0, 0);"><br></span></font></div><div style="margin: 0cm;"><font color="#000000" face="Aptos, sans-serif" size="3"><span style="caret-color: rgb(0, 0, 0);">Paul & Christian updated the PR earlier today. Ready to move away from being draft. Paul talked through the latest version.</span></font></div><div style="margin: 0cm;"><font color="#000000" face="Aptos, sans-serif" size="3">Several questions (see the ‘unticked’ items in the PR summary).</font></div><div style="margin: 0cm;"><font color="#000000" face="Aptos, sans-serif" size="3"><br></font></div><div style="margin: 0cm;"><font color="#000000" face="Aptos, sans-serif" size="3">Some discussion about what the PR is trying to achieve. Essentially you need a proof of possession for a key, but not for the keys that are being bound (as proof of possessions) to the issued credentials. See comment Kristina added to PR for the consensus from the call.</font></div><div style="margin: 0cm;"><font color="#000000" face="Aptos, sans-serif" size="3"><br></font></div><div style="margin: 0cm;"><font color="#000000" face="Aptos, sans-serif" size="3"><u>Nonce PR</u></font></div><div style="margin: 0cm;"><font color="#000000" face="Aptos, sans-serif" size="3"><br></font></div><div style="margin: 0cm;"><font face="Helvetica Neue" size="2"><a href="https://github.com/openid/OpenID4VCI/pull/381">https://github.com/openid/OpenID4VCI/pull/381</a></font></div><div style="margin: 0cm;"><br></div><div style="margin: 0cm;"><font color="#000000" face="Aptos, sans-serif" size="3">Some debate over GET vs POST for nonce endpoint. Brian had tried removing the specification of which http method is used, there seemed to be a consensus that we do need to pick for interoperability purposes. We agreed on picking POST relatively arbitrarily as we just need to pick one. Brian to update PR.</font></div><div style="margin: 0cm;"><font color="#000000" face="Aptos, sans-serif" size="3"><br></font></div><div style="margin: 0cm;"><font color="#000000" face="Aptos, sans-serif" size="3"><span style="caret-color: rgb(0, 0, 0);"><br></span></font></div><div style="margin: 0cm;"><font color="#000000" face="Aptos, sans-serif" size="3"><u>How can verifiers that support multiple trust models/ecosystems know how to authenticate to the wallet? </u></font></div><div style="margin: 0cm;"><font color="#000000" face="Aptos, sans-serif" size="3"><br></font></div><div style="margin: 0cm;"><font color="#000000" face="Aptos, sans-serif" size="3"><a href="https://github.com/openid/OpenID4VP/issues/248">https://github.com/openid/OpenID4VP/issues/248</a></font></div><div style="margin: 0cm;"><font color="#000000" face="Aptos, sans-serif" size="3"><span style="caret-color: rgb(0, 0, 0);"><br></span></font></div><div style="margin: 0cm;"><font color="#000000" face="Aptos, sans-serif" size="3">Question about whether we can solve this without imposing JWS JSON serialisation. Potentially can be solved for browser API by making multiple requests (albeit that results in duplication of the payload), and in non-browser API using request_uri_method=POST - although in the latter case there’s an issue if the client_id needs to be different depending on which wallet the verifier is authenticating too, we ran out of time before reaching a conclusion on that. We didn’t have enough browser people on the call to discuss the Browser API part.</font></div><div style="margin: 0cm;"><font color="#000000" face="Aptos, sans-serif" size="3"><br></font></div><div style="margin: 0cm;"><font color="#000000" face="Aptos, sans-serif" size="3"><br></font></div></div></div></body></html>