<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Aptos;
panose-1:2 11 0 4 2 2 2 2 2 4;}
@font-face
{font-family:"Helvetica Neue";
panose-1:2 0 5 3 0 0 0 2 0 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:12.0pt;
font-family:"Aptos",sans-serif;
mso-ligatures:standardcontextual;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#467886;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Aptos",sans-serif;
color:windowtext;}
p.p2, li.p2, div.p2
{mso-style-name:p2;
margin:0in;
font-size:10.0pt;
font-family:"Helvetica Neue";}
p.p3, li.p3, div.p3
{mso-style-name:p3;
margin:0in;
font-size:10.0pt;
font-family:"Helvetica Neue";}
span.s2
{mso-style-name:s2;
text-decoration:underline;}
p.li2, li.li2, div.li2
{mso-style-name:li2;
margin:0in;
font-size:10.0pt;
font-family:"Helvetica Neue";}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:92285404;
mso-list-template-ids:918844430;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7 ;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:\F0B7 ;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:\F0B7 ;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7 ;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:\F0B7 ;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:\F0B7 ;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7 ;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:\F0B7 ;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:\F0B7 ;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style>
</head>
<body lang="EN-US" link="#467886" vlink="#96607D" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">Hi Folks,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Below is the list of attendees:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="p2">Rajvardhan Deshmukh<o:p></o:p></p>
<p class="p2">Kristina Yasuda<o:p></o:p></p>
<p class="p2">Torsten Lodderstedt<o:p></o:p></p>
<p class="p2">Bjorn Hjelm<o:p></o:p></p>
<p class="p2">Brian Campbell<o:p></o:p></p>
<p class="p2">Christian Bormann<o:p></o:p></p>
<p class="p2">David Waite<o:p></o:p></p>
<p class="p2">Elizabeth Garber<o:p></o:p></p>
<p class="p2">Jan Vereecken<o:p></o:p></p>
<p class="p2">Juba Saadi<o:p></o:p></p>
<p class="p2">Michael Jones<o:p></o:p></p>
<p class="p2">Nick Steele<o:p></o:p></p>
<p class="p2">Oliver Terbu<o:p></o:p></p>
<p class="p2">Paul Bastian<o:p></o:p></p>
<p class="p2">Rene Leveille<o:p></o:p></p>
<p class="p3"><o:p> </o:p></p>
<p class="p2">Meeting registration reminders before<span class="apple-converted-space">
</span>(Google Sunnyvale on 7th April) and after (Apple Cupertino on 11th April) IIW<o:p></o:p></p>
<p class="p2">Tuesday’s notes<o:p></o:p></p>
<p class="p3"><o:p> </o:p></p>
<p class="p2">open id federation event in Sweden <a href="https://openid.net/openid-federation-interop-apr-28-30-2025/">
https://openid.net/openid-federation-interop-apr-28-30-2025/</a><o:p></o:p></p>
<p class="p3"><o:p> </o:p></p>
<p class="p2"><a href="https://github.com/openid/OpenID4VP/issues/423">https://github.com/openid/OpenID4VP/issues/423</a> normative change that will achieve same goal by relaxing the restriction on transaction_data_hashes. Please review the PR and continue
discussion in the PR.<o:p></o:p></p>
<p class="p3"><o:p> </o:p></p>
<p class="p2"><a href="https://github.com/openid/oid4vc-haip/issues/156">https://github.com/openid/oid4vc-haip/issues/156</a> implementation mandatory for wallet and issuer, but whether to use it or not is up to the policy.<o:p></o:p></p>
<p class="p2">agreement to add a sentence "When the issuer authentication is required by the policy, signed_metadata MUST be supported by both the Issuer and the Wallet"<o:p></o:p></p>
<p class="p2">who creates policy not to be mentioned<o:p></o:p></p>
<p class="p3"><o:p> </o:p></p>
<p class="p3"><o:p> </o:p></p>
<p class="p2"><a href="https://docs.google.com/presentation/d/1MJc33dmXb2Yip2neo0gbWilMUZ1vpCDq1Ucy48GFG34/edit#slide=id.g310d3171d57_0_27">https://docs.google.com/presentation/d/1MJc33dmXb2Yip2neo0gbWilMUZ1vpCDq1Ucy48GFG34/edit#slide=id.g310d3171d57_0_27</a><span class="apple-converted-space"> </span><o:p></o:p></p>
<p class="p3"><o:p> </o:p></p>
<p class="p2"><a href="https://docs.google.com/document/d/1y3milcqMkAHqf4862ANoCA7irg6gNaDI3aNOVaZMoVY/edit?usp=sharing">https://docs.google.com/document/d/1y3milcqMkAHqf4862ANoCA7irg6gNaDI3aNOVaZMoVY/edit?usp=sharing</a><o:p></o:p></p>
<p class="p3"><o:p> </o:p></p>
<p class="p2"><a href="https://docs.google.com/spreadsheets/d/1zAcOlB0BNRlEn-doJEew01XJtflU9q3ODVQBd8VuJyk/edit?usp=sharing">https://docs.google.com/spreadsheets/d/1zAcOlB0BNRlEn-doJEew01XJtflU9q3ODVQBd8VuJyk/edit?usp=sharing</a><o:p></o:p></p>
<p class="p3"><o:p> </o:p></p>
<p class="p2"><a href="https://github.com/openid/oid4vc-haip/issues/43">https://github.com/openid/oid4vc-haip/issues/43</a><span class="apple-converted-space"> </span><o:p></o:p></p>
<p class="p2">Mandate only x509, both issuer and wallet.<o:p></o:p></p>
<p class="p2">what if web based key resolution is used?<o:p></o:p></p>
<p class="p2">Ecosystem is free to extend , but haip only mandates to implement x509 but do not have to be used in each transaction.<o:p></o:p></p>
<p class="p3"><o:p> </o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="li2" style="mso-list:l0 level1 lfo1">for verifier attestation: mandate x509_hash for both: The Client Identifier Scheme as introduced in Section 5.10 of [<a href="https://openid.github.io/oid4vc-haip/openid4vc-high-assurance-interoperability-profile-wg-draft.html#OIDF.OID4VP"><span class="s2"><span style="color:blue">OIDF.OID4VP</span></span></a>]
MUST be x509_hash for both the wallet and the verifier.<o:p></o:p></li><li class="li2" style="mso-list:l0 level1 lfo1">for sd-jwt vc issuer key resolution: mandate x509 for both issuer and the wallet and the verifier. mention web-based key resolution as an option.<o:p></o:p></li></ul>
<p class="p3"><o:p> </o:p></p>
<p class="p2">for wallet attestation, keeping:<o:p></o:p></p>
<p class="p2">The public key, and optionally a trust chain, used to validate the signature on the Wallet Attestation MUST be included in the x5c JOSE header.<o:p></o:p></p>
<p class="p3"><o:p> </o:p></p>
<p class="p2">status should mandate x5c. "The public key used to validate the signature on the Status List token MUST be included in the x5c JOSE header"<o:p></o:p></p>
<p class="p3"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Best,<br>
Raj<o:p></o:p></span></p>
</div>
</body>
</html>