<html><head><meta http-equiv="content-type" content="text/html; charset=us-ascii"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><meta http-equiv="content-type" content="text/html; charset=us-ascii"><div style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">Hi all<div><br></div><div>Draft 26 of OID4VP has been published:</div><div><br></div><div><a href="https://openid.net/specs/openid-4-verifiable-presentations-1_0-26.html">https://openid.net/specs/openid-4-verifiable-presentations-1_0-26.html</a><br></div><div><br></div><div>The reason for publishing this is so we have a published numbered draft for working group members to review during working group last call (look out for a separate email on that subject in the next day or so).</div><div><br></div><div>Change log is:</div><div><br></div><div><div><ul class="MailOutline"><li class="compact" id="appendix-H-3.1" style="margin: 0px 0px 0.25em;">add <code style="background-color: rgb(248, 248, 248); font-family: var(--font-mono); font-size: 13.3px;">verifier_attestations</code> to list of authorization parameters</li><li class="compact" id="appendix-H-3.2" style="margin: 0px 0px 0.25em;">renamed "Client ID Scheme" to "Client ID Prefix", and updated metadata (<code style="background-color: rgb(248, 248, 248); font-family: var(--font-mono); font-size: 13.3px;">client_id_prefixes_supported</code>) and an example <code style="background-color: rgb(248, 248, 248); font-family: var(--font-mono); font-size: 13.3px;">error_description</code> to match</li><li class="compact" id="appendix-H-3.3" style="margin: 0px 0px 0.25em;">add note that <code style="background-color: rgb(248, 248, 248); font-family: var(--font-mono); font-size: 13.3px;">iss</code> must be ignored if present in the request object</li><li class="compact" id="appendix-H-3.4" style="margin: 0px 0px 0.25em;">added security considerations for value matching in DCQL</li><li class="compact" id="appendix-H-3.5" style="margin: 0px 0px 0.25em;">require <code style="background-color: rgb(248, 248, 248); font-family: var(--font-mono); font-size: 13.3px;">kid</code> in JWE response header if present in client_metadata <code style="background-color: rgb(248, 248, 248); font-family: var(--font-mono); font-size: 13.3px;">jwks</code></li><li class="compact" id="appendix-H-3.6" style="margin: 0px 0px 0.25em;">added some more (non-exhaustive) privacy considerations with pointers to SD-JWT and OpenID4VCI</li><li class="compact" id="appendix-H-3.7" style="margin: 0px 0px 0.25em;">add implementation consideration about pre-final specs</li><li class="compact" id="appendix-H-3.8" style="margin: 0px 0px 0.25em;">remove DIF Presentation Exchange as a query language option</li><li class="compact" id="appendix-H-3.9" style="margin: 0px 0px 0.25em;">Changes in the DCQL query parameters specific to W3C VCs and AnonCreds</li><li class="compact" id="appendix-H-3.10" style="margin: 0px 0px 0.25em;">Introduce ability to present without key binding, including a new parameter <code style="background-color: rgb(248, 248, 248); font-family: var(--font-mono); font-size: 13.3px;">require_cryptographic_holder_binding</code> in the Credential Query</li><li class="compact" id="appendix-H-3.11" style="margin: 0px 0px 0.25em;">Adapt usage of "Verifiable Presentation" to only refer to Presentations with Holder Binding and "Presentation" to refer to all types of credential presentations</li><li class="compact" id="appendix-H-3.12" style="margin: 0px 0px 0.25em;">change the identifier for the ETSI trusted list <code style="background-color: rgb(248, 248, 248); font-family: var(--font-mono); font-size: 13.3px;">trusted_authorities</code> entry from <code style="background-color: rgb(248, 248, 248); font-family: var(--font-mono); font-size: 13.3px;">openid_fed</code> to <code style="background-color: rgb(248, 248, 248); font-family: var(--font-mono); font-size: 13.3px;">openid_federation</code></li><li class="compact" id="appendix-H-3.13" style="margin: 0px 0px 0.25em;">change openid_fed to openid_federation for Trusted Authorities Query</li><li class="compact" id="appendix-H-3.14" style="margin: 0px 0px 0.25em;">remove JARM and response signing, using JWT directly for unsigned, encrypted responses.</li><li class="compact" id="appendix-H-3.15" style="margin: 0px 0px 0.25em;">make consistent the use of prefixes in the client_id prefixing, defining new <code style="background-color: rgb(248, 248, 248); font-family: var(--font-mono); font-size: 13.3px;">openid_federation:</code> and <code style="background-color: rgb(248, 248, 248); font-family: var(--font-mono); font-size: 13.3px;">decentralized_identifier:</code> prefixes</li><li class="compact" id="appendix-H-3.16" style="margin: 0px 0px 0.25em;">fix nonce computation for AnonCreds</li><li class="compact" id="appendix-H-3.17" style="margin: 0px 0px 0.25em;">For w3c vc, DCQL <code style="background-color: rgb(248, 248, 248); font-family: var(--font-mono); font-size: 13.3px;">type_values</code> now matches against expanded type values</li><li class="compact" id="appendix-H-3.18" style="margin: 0px 0px 0.25em;">For ISO mdoc, <code style="background-color: rgb(248, 248, 248); font-family: var(--font-mono); font-size: 13.3px;">doctype_value</code> is now mandatory in DCQL query <code style="background-color: rgb(248, 248, 248); font-family: var(--font-mono); font-size: 13.3px;">meta</code> parameter</li><li class="compact" id="appendix-H-3.19" style="margin: 0px 0px 0.25em;">For SD-JWT VC, <code style="background-color: rgb(248, 248, 248); font-family: var(--font-mono); font-size: 13.3px;">vct_values</code> is now mandatory in DCQL query <code style="background-color: rgb(248, 248, 248); font-family: var(--font-mono); font-size: 13.3px;">meta</code> parameter</li><li class="compact" id="appendix-H-3.20" style="margin: 0px 0px 0.25em;">For W3C VC, <code style="background-color: rgb(248, 248, 248); font-family: var(--font-mono); font-size: 13.3px;">type_values</code> is now mandatory in DCQL query <code style="background-color: rgb(248, 248, 248); font-family: var(--font-mono); font-size: 13.3px;">meta</code> parameter</li><li class="compact" id="appendix-H-3.21" style="margin: 0px 0px 0.25em;"><code style="background-color: rgb(248, 248, 248); font-family: var(--font-mono); font-size: 13.3px;">purpose</code> element removed from DCQL <code style="background-color: rgb(248, 248, 248); font-family: var(--font-mono); font-size: 13.3px;">credential_sets</code></li><li class="compact" id="appendix-H-3.22" style="margin: 0px 0px 0.25em;">Add new DC API <code style="background-color: rgb(248, 248, 248); font-family: var(--font-mono); font-size: 13.3px;">openid4vp-v1-multisigned</code> protocol identifier for requests with JWS JSON Serialization</li><li class="compact" id="appendix-H-3.23" style="margin: 0px 0px 0.25em;">Remove incorrect requirement for automatic registration when using OpenID Federation</li><li class="compact" id="appendix-H-3.24" style="margin: 0px 0px 0.25em;">Change DCQL processing rules to allow the same credential to fulfil different queries</li><br class="Apple-interchange-newline"></ul></div></div><div><br></div><div>Thanks</div><div><br></div><div>Joseph</div><div><br></div><div></div></div></body></html>